![previous page: 3.12] What is an interframe gap? (Ethernet Physical Layer)](../../../images/nav/page_prev.gif){kind=small}
![next page: 4.2] What is transparent bridging? (Ethernet Data Link Layer)](../../../images/nav/page_next.gif){kind=small}
4.1] What are the different Ethernet frame formats? (Ethernet Data Link Layer)
Description
This article is from the Ethernet FAQ, by James Messer James@NetworkUptime.com with numerous contributions by others.
4.1] What are the different Ethernet frame formats? (Ethernet Data Link Layer)
Ethernet Version 2 and IEEE 802.3 Frame Formats
-----------------------------------------------
The Ethernet Version 2 frame format was designed before the IEEE
specifications, but is almost identical to the 802.3 frame type.
With the Ethernet Version 2 frame type, a two-byte Type field
follows the source station's six-byte MAC address. In the 802.3
frame type, this two-byte field after the source address is a length
field specifying the number of bytes in the LLC and data fields. If
these two bytes are greater than 05DC hex (1500 decimal), the frame
is a Version 2 frame. Since all type fields are greater than 1500
decimal (the maximum Ethernet frame size), both frame types can
easily coexist on the same network. Some network protocol analyzers
call a Version 2 frame an Ethertype frame because of this two-byte
Type field.
This is an Ethernet Version 2 frame:
+--------------+
| | The preamble consists of 62 bits of alternating
| Preamble | ones and zeros that allows the Ethernet card to
| 7 bytes | synchronize with the beginning of a frame.
| |
+--------------+ The Start Frame Delimiter is the sequence
| SFD - 1 byte | 10101011, and indicates the start of a frame.
+--------------+
| | The destination address is a six byte Media Access
| Destination | Control (MAC) address, usually burned into the
| 6 bytes | ROM of the Ethernet card.
+--------------+
| | The source address is a six byte MAC address, and
| Source | can signify a physical station or a broadcast.
| 6 bytes |
+--------------+
| Type | The Type field (see explanation above).
| 2 bytes |
+--------------+
| | Any higher layer information is placed in the
| Data | data field, which could contain protocol
| | information or user data.
~ ~
~ ~
| 46 to 1500 |
| bytes |
| |
+--------------+
| FCS | The Frame Check Sequence is a cyclic redundancy
| 4 bytes | check used by the sending and receiving stations
+--------------+ to verify a successful transmission. The FCS is
based on the contents of the destination address,
source address, type, and data.
The 802.2 Logical Link Control (LLC) Information
------------------------------------------------
The IEEE 802.3 Ethernet specification was intended to be used with
the 802.2 Logical Link Control (LLC) specification. The LLC
information envelops the data of the frame, and the 802.3 headers
envelop this 802.2 LLC protocol data unit (PDU).
This is the frame structure for an 802.3 Ethernet frame that
contains the 802.2 LLC information:
+----------------+
| |
| Preamble |
| 7 bytes |
| |
+----------------+
| SFD - 1 byte |
+----------------+
| |
| Destination |
| 6 bytes |
+----------------+
| |
| Source |
| 6 bytes |
+----------------+
| Frame Length |
| 2 bytes |
+----------------+
| DSAP - 1 byte | The Destination and Source Service Access Point
+----------------+ fields determine the protocol used for the upper
| SSAP - 1 byte | protocol type of the frame.
+----------------+
|Control - 1 byte| The Control field is used for administration by
+----------------+ certain protocols.
| Data |
| |
~ ~
~ ~
| 46 to 1500 |
| bytes |
| |
+----------------+
| FCS |
| 4 bytes |
+----------------+
The 802.2 Sub-Network Access Protocol (SNAP)
--------------------------------------------
After the 802.2 frame type was defined, many people felt that a
single byte for DSAP and SSAP would not be sufficient to handle the
growth of protocols into the future. A single byte DSAP or SSAP can
only specify 256 separate protocols, and many of those were
predefined from the beginning of the 802.2 specification.
To provide future growth, the Sub-Network Access Protocol (SNAP) was
created as an extension to the 802.2 specification. To differentiate
this protocol from the original 802.2 specification, 802.2 SNAP uses
the DSAP and SSAP of 0xAA.
This is an 802.2 SNAP frame encapsulated in an 802.3 frame:
+----------------+
| |
| Preamble |
| 7 bytes |
| |
+----------------+
| SFD - 1 byte |
+----------------+
| |
| Destination |
| 6 bytes |
+----------------+
| |
| Source |
| 6 bytes |
+----------------+
| Frame Length |
| 2 bytes |
+----------------+
| DSAP - 1 byte |
+----------------+
| SSAP - 1 byte |
+----------------+
|Control - 1 byte|
+----------------+ The Organizationally Unique ID (OUI) is assigned
| OUI - 3 bytes | to unique vendors to help differentiate protocols
| | from different manufacturers.
+----------------+
| Type - 2 bytes | The two-byte protocol type defines a specific
+----------------+ protocol in the SNAP. This also maintains a
| | compatibility with Ethernet v2.
| Data |
| |
~ ~
~ ~
| 46 to 1500 |
| bytes |
| |
+----------------+
| FCS |
| 4 bytes |
+----------------+
Novell 802.3 'Raw' Frame Format
-------------------------------
Before the final 802.2 LLC specifications were finalized, Novell
implemented IPX/SPX over Ethernet. For this reason, Novell
originally utilized 802.3 Ethernet without using 802.2 LLC. Because
of this lack of LLC header, this frame type was nicknamed 802.3
'raw'. Since Novell created this proprietary frame type for their
own use, no other manufacturer uses this frame type.
To implement their 'raw' frame type, Novell used the first two bytes
of the 802.3 data field as 0xFFFF. Since the DSAP and SSAP values of
0xFF do not exist, it becomes easy to differentiate between the
802.3 and 802.3 'raw' frame types.
Continue to:
My Books
