Why is ip.tos.precedence empty?

display

asked 2017-11-17 13:21:12 +0000

franjorge
1 ●2 ●3 ●2

Hello,

I have created a new column with:

Type: Custom
Fields: ip.tos.precedence

However, this column is always empty. What I would expect is to find the three leftmost bits of the ip.dsfield field there, but as I said it is empty for all packets. I have created a column with ip.dsfield and it does show values.

Am I missing anything?

Thanks, Fran

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2017-11-17 13:48:19 +0000

sindy
6209 ●5 ●66 ●55

This happens because the IP dissector can handle the byte as either TOS or DiffServ but not both simultaneously. So uncheck Decode IPv4 TOS field as DiffServ field in the IP dissector preferences - after that, your desired ip.tos.precedencevalues will be displayed, while ip.dsfield will not.

edit flag offensive delete link

Comments

That was it!!! Thanks a lot for your help!!!

Fran

franjorge ( 2017-11-20 07:36:49 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

2 followers

Stats

Asked: 2017-11-17 13:21:12 +0000

Seen: 1,610 times

Last updated: Nov 17 '17

Why is ip.tos.precedence empty? edit