[Wylug-help] Ethernet Type Codes for IPSEC

[Jim Jackson]

On Tue, 2 Dec 2003, Daniel Walker wrote:

> Julian Church wrote:
> > Are you sure you're not after the IP protocol number?
> >
> > ESP is protocol number 50
> >
> > http://www.networksorcery.com/enp/protocol/esp.htm
>
> Fairly sure. To quote the manual:
> 	 Type: Enter the hexadecimal number for the Ethernet type field
> 	 in Ethernet_II packets. For example, 0800 is for IP protocol.
>
> James reckons that ESP still uses 0800 - which is going to make
> filtering it a bit hard...
>

ESP is the IP protocol field. From rfc1700

    50     SIPP-ESP    SIPP Encap Security Payload [Steve Deering]

800 is the ethernet protocol field for an IP packet. These are different
fields in different parts of a packet.