Why is ip.tos.precedence empty?

asked 2017-11-17 13:21:12 +0000

franjorge
1 ●2 ●3 ●2

Hello,

I have created a new column with:

Type: Custom
Fields: ip.tos.precedence

However, this column is always empty. What I would expect is to find the three leftmost bits of the ip.dsfield field there, but as I said it is empty for all packets. I have created a column with ip.dsfield and it does show values.

Am I missing anything?

Thanks, Fran

answered 2017-11-17 13:48:19 +0000

sindy
6209 ●5 ●66 ●55

This happens because the IP dissector can handle the byte as either TOS or DiffServ but not both simultaneously. So uncheck Decode IPv4 TOS field as DiffServ field in the IP dissector preferences - after that, your desired ip.tos.precedencevalues will be displayed, while ip.dsfield will not.

edit flag offensive delete link

Comments

That was it!!! Thanks a lot for your help!!!

Fran

franjorge ( 2017-11-20 07:36:49 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Why is ip.tos.precedence empty?

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Why is ip.tos.precedence empty? edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Why is ip.tos.precedence empty?