> On 24 Mar, 2019, at 12:05 pm, Pete Heist <[email protected]> wrote: > > tcpdump -r file.pcap udp port 2112 and greater 80 and "ip[1] != 0x1” > > “greater 80” ignores the handshake packets and 0x1 is whatever TOS value we > want to make sure the packets contain. We can use different filters for other > traffic.
Bear in mind that the TOS byte contains ECN as well as DSCP fields, and the latter is left-justified. - Jonathan Morton _______________________________________________ Cake mailing list [email protected] https://lists.bufferbloat.net/listinfo/cake
