Changing WAN Protocols - Mocha Wan extension for EtherPeek Exit EtherPeek Run the Mocha Control Applet, Mocha_App.exe from the directory Program Files\WildPackets\Etherpeek NX\ Select the Protocols Tab Click the 'Change' button Select the new Protocol Press 'Confirm' to select Note: For the new protocol to take effect you must remove the Mocha Card and re-insert it. To do this, double click on the PC Card Icon in the system tray. Click to highlight the "Logix Mocha Wan Adapter" Click the "Stop" button. Wait for the Message "You may safely remove this device" Remove the Mocha Card. Reinsert the Mocha Card. Run EtherPeek with the new Protocol. WAN Protocols Each WAN Protocol has it's own Device Driver, it's own EtherType Protocol identifier, and discrete MAC addresses for each protocol and various sub-protocols, These allow full integration of the WAN data into the EtherPeek Analyser. Mac Addresses and Protocol Values can be given Name Table entries for meaningful identification. DTE and DCE identification For DCE Origin frames, the Source MAC address is 09.00.00.44.43.45 = data is from DCE For DTE Origin frames, the Destination MAC address is 09.00.00.44.54.45 = data is from DTE The other Mac (source/destination) address identifies the Frame, either by address or by type, as detailed in the Mocha reference manual. Wan Protocol EtherType The Ethertype contains a unique Wan Protocol Identifier, in the range 6920 to 699F, and are detailed in the reference manual. Wan Frame Header Wan Frames include the following Header Information (in a collapsible field within EtherPeek Decode window) DTE or DCE Origin TimeStamp in the format hh:mm:ss.millisecs mm/dd/yyyy The EtherType indicates the supported WAN protocol. The following data will be decoded according to the Wan protocol selected.