DECNet hickup Revisited

Yesterday I learned how to translate the MAC address in the message to a DECNet address: Take the last two bytes, swap them, convert to decimal number, DIV and MOD by 1024 and you end up with network.node. As it turns out to be 21.01 – or the machine itself. That makes sense: HTTP$NOBODY is the CGI-user of the WASD server. Now locate service number 17 (hex?). The question remains what happened…