What capture filter will test whether the DSCP value in the IPv4 header is in a particular range?

asked 2020-07-16 15:31:42 +0000

r.grossmann
3 ●1 ●1 ●2

updated 2020-07-17 22:59:44 +0000

Guy Harris
19890 ●3 ●634 ●207

Hello,

I just want to capture traffic with specific DSCP Value Range. How can I achieve this? Is there a way to filter for an value range or mask?

I did find the following in the wireshark blog:

ip[1] & 0xfc == 0xb8

This one works, but only for DSCP Value 46. I want to capture only packets with DSCP Value Range 8-23...

I tried it with an edited mask and filter value, but this does not work, only the last original filter for EF...:

ip[1] & 0xe0 == 0x20 or ip[1] & 0xe0 == 0x40 or ip[1] & 0x80 == 0xb8 or ip[1] & 0xfc == 0xb8

So can anyone help me?

Kind regards

Robert

PS: OS Windows 10 Enterprise x64 1909 18363.959 Wireshark Version 3.2.5 (v3.2.5-0-ged20ddea8138)

edit retag flag offensive close merge delete

add a comment

Comments

thank you, it works! Solution was too easy^^ I'm almost embarrassed to have asked something simple.

r.grossmann ( 2020-07-17 06:35:28 +0000 )edit

@r.grossmann Our habit is not to close successfully answered questions, but simply accept the answer by clicking the checkmark to the left of it. I've reopened the question.

grahamb ( 2020-07-17 07:46:41 +0000 )edit

okay. sorry for this. I didn't see the check mark on the left side or and other option to accept the answer. I guess i should go to the doctor to check my eyes^^

r.grossmann ( 2020-07-17 08:01:42 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

What capture filter will test whether the DSCP value in the IPv4 header is in a particular range?

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

What capture filter will test whether the DSCP value in the IPv4 header is in a particular range? edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

What capture filter will test whether the DSCP value in the IPv4 header is in a particular range?