The property specifies the Neighbor Discovery Protocol, which is used with IPv6 to NDP determine the link-layer addresses for neighbors. It corresponds to a combination of IPv4 protocols: ARP, ICMP Router Discovery, and ICMP Redirect. NDP 0..1 NDPType Only one of the properties of can be populated. LogicalProtocolChoiceType ARPType Class The class characterizes the Address Resolution Protocol, which is a request and reply protocol that runs encapsulated by the line ARPType protocol. It is communicated within the boundaries of a single network, and never routed across inter-network nodes. This property places ARP into the Link Layer. See for more information. The property table of the class is given in Table 37. ARPType Table . Properties of the class ARPType Name Type Multiplicity Description The property characterizes the type Hardware_Addr_Type Hardware_Addr_Type 0..1 IANAHardwareType of hardware address specified in an ARP message. The property characterizes the type of Proto_Addr_Type Proto_Addr_Type IANAEtherType 0..1 protocol address being mapped. For IPv4 addresses, the value is 0x0800. The property represents the byte Hardware_Addr_Size cyboxCommon: Hardware_Addr_Size 0..1 size of the hardware address. For Ethernet or other IEEE 802 HexBinaryObjectPropertyType MAC addresses, the value is 6. The property represents the byte size of cyboxCommon: Proto_Addr_Size Proto_Addr_Size 0..1 the protocol address. For IPv4 addresses, the value is 4. HexBinaryObjectPropertyType
NDP NDPType 0..1 The NDP property specifies the Neighbor Discovery Protocol, which is used with IPv6 to determine the link-layer addresses for neighbors. It corresponds to a combination of IPv4 protocols: ARP, ICMP Router Discovery, and ICMP Redirect. Only one of the properties of LogicalProtocolChoiceType can be populated. ARPType Class The ARPType class characterizes the Address Resolution Protocol, which is a request and reply protocol that runs encapsulated by the line protocol. It is communicated within the boundaries of a single network, and never routed across inter-network nodes. This property places ARP into the Link Layer. See for more information. The property table of the ARPType class is given in Table 37. Table . Properties of the ARPType class Name Type Multiplicity Description Hardware_Addr_Type IANAHardwareType 0..1 The Hardware_Addr_Type property characterizes the type of hardware address specified in an ARP message. Proto_Addr_Type IANAEtherType 0..1 The Proto_Addr_Type property characterizes the type of protocol address being mapped. For IPv4 addresses, the value is 0x0800. Hardware_Addr_Size cyboxCommon: HexBinaryObjectPropertyType 0..1 The Hardware_Addr_Size property represents the byte size of the hardware address. For Ethernet or other IEEE 802 MAC addresses, the value is 6. Proto_Addr_Size cyboxCommon: HexBinaryObjectPropertyType 0..1 The Proto_Addr_Size property represents the byte size of the protocol address. For IPv4 addresses, the value is 4.
cybox-v2.1.1-csprd01-part38-network-packet.docx