Ask Your Question
0

Why is ip.tos.precedence empty?

asked 2017-11-17 13:21:12 +0000

Hello,

I have created a new column with:

Type: Custom
Fields: ip.tos.precedence

However, this column is always empty. What I would expect is to find the three leftmost bits of the ip.dsfield field there, but as I said it is empty for all packets. I have created a column with ip.dsfield and it does show values.

Am I missing anything?

Thanks, Fran

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2017-11-17 13:48:19 +0000

sindy gravatar image

This happens because the IP dissector can handle the byte as either TOS or DiffServ but not both simultaneously. So uncheck Decode IPv4 TOS field as DiffServ field in the IP dissector preferences - after that, your desired ip.tos.precedencevalues will be displayed, while ip.dsfield will not.

edit flag offensive delete link more

Comments

That was it!!! Thanks a lot for your help!!!

Fran

franjorge gravatar imagefranjorge ( 2017-11-20 07:36:49 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

2 followers

Stats

Asked: 2017-11-17 13:21:12 +0000

Seen: 34 times

Last updated: Nov 17