Introduction to Data Communications
Previous 36. Packet Sniffing (cont'd) Next
Netware Socket Numbers and Processes


	Socket Number		Process

		451h		Netware Core Protocol (NCP)

		452h		Service Advertising Protocol (SAP)

		453h		Routing Information Protocol (RIP)

		455h		Novell NetBIOS

		456h		Diagnostics

		9001		Netware Link Services Protocol (NLSP)

		9004		IPXWAN Protocol

Transport Layer

The Network layer's Data field becomes the Transport layer's PDU. In this case it is only 4 bytes long.


	1st 2 bytes:	0001	Packet type (Standard Server Request)

	Next 2 bytes:	0004	Service type (file server)

The following tables describe the values of the Service Advertising Protocol's Packet Type and Service Type fields:


	Field Value (hex)	Packet Type

		01		Standard Server Request

		02		Standard Server Reply

		03		Nearest Server Request

		04		Nearest Server Reply

SAP Packet Types


	Field Value (hex)	Service Type

		0000		Unknown

		0003		Print Queue

		0004		File Server

		0005		Job Server

		0007		Print Server

		0009		Archive Server

		0024		Remote Bridge Server

		0047		Advertising Print Server

		8000		All values are reserved up to 8000

		FFFF		Wildcard

Example Packet Sniffing Summary

This packet is commonly called a Standard Server Request that is broadcast (Destination FF-FF-FF-FF-FF-FF) on the local network (00-00-00-00) from a Novell Netware client. The client is looking for a file server to login in to. The server would respond with a Server Advertising Protocol PDU listing its services.

Introduction to Data Communications
Previous Table of Contents Next