While examining an 8023 Ethernet frame from a packet capture

While examining an 802.3 Ethernet frame from a packet capture, you notice the entry in the Type field is 0800 (in hex). Which of the following are true?

A. The entry indicates the length of the frame.

B. The entry indicates the protocol being transported.

C. The frame is 0800 bits in length.

D. The frame is transporting an IPv4 packet.

Solution

B and D are correct. If the entry is larger than 0600, it indicates the Layer 3 protocol being transmitted. IPv4 equates to 0800 in hex.

A and C are incorrect. The entry is larger than 0600, so neither of these can be true.