On Sun, 24 Mar 2019 13:32:03 +0100 Michael Richardson <[email protected]> wrote:
> Jonathan Morton <[email protected]> wrote: > >> On 24 Mar, 2019, at 12:05 pm, Pete Heist <[email protected]> wrote: > >> > >> tcpdump -r file.pcap udp port 2112 and greater 80 and "ip[1] != 0x1” > >> > >> “greater 80” ignores the handshake packets and 0x1 is whatever TOS > >> value we want to make sure the packets contain. We can use different > >> filters for other traffic. > > > Bear in mind that the TOS byte contains ECN as well as DSCP fields, and > > the latter is left-justified. > > libpcap should probably learn about DSCN bits to avoid people having to > think so much :-) > > Send patches to me/github. > Libpcap is ancient history by now. It is like ifconfig, everyone still can't reprogram their brain; but the tool is on life support. All development is happening on wireshark/tshark. _______________________________________________ Cake mailing list [email protected] https://lists.bufferbloat.net/listinfo/cake
