Ask Your Question

Revision history [back]

Capture Filter: DSCP Value Range or Mask

Hello,

I just want to capture traffic with specific DSCP Value Range. How can I achieve this? Is there a way to filter for an value range or mask?

I did find the following in the wireshark blog:

ip[1] & 0xfc == 0xb8

This one works, but only for DSCP Value 46. I want to capture only packets with DSCP Value Range 8-23...

I tried it with an edited mask and filter value, but this does not work, only the last original filter for EF...:

ip[1] & 0xe0 == 0x20 or ip[1] & 0xe0 == 0x40 or ip[1] & 0x80 == 0xb8 or ip[1] & 0xfc == 0xb8

So can anyone help me?

Kind regards

Robert

PS: OS Windows 10 Enterprise x64 1909 18363.959 Wireshark Version 3.2.5 (v3.2.5-0-ged20ddea8138)

click to hide/show revision 2
None

Capture Filter: DSCP Value Range or Mask

Hello,

I just want to capture traffic with specific DSCP Value Range. How can I achieve this? Is there a way to filter for an value range or mask?

I did find the following in the wireshark blog:

ip[1] & 0xfc == 0xb8

This one works, but only for DSCP Value 46. I want to capture only packets with DSCP Value Range 8-23...

I tried it with an edited mask and filter value, but this does not work, only the last original filter for EF...:

ip[1] & 0xe0 == 0x20 or ip[1] & 0xe0 == 0x40 or ip[1] & 0x80 == 0xb8 or ip[1] & 0xfc == 0xb8

So can anyone help me?

Kind regards

Robert

PS: OS Windows 10 Enterprise x64 1909 18363.959 Wireshark Version 3.2.5 (v3.2.5-0-ged20ddea8138)