On Mon, Apr 1, 2019 at 6:03 PM Stephen Hemminger <[email protected]> wrote: > > On Sun, 24 Mar 2019 13:32:03 +0100 > Michael Richardson <[email protected]> wrote: > > > Jonathan Morton <[email protected]> wrote: > > >> On 24 Mar, 2019, at 12:05 pm, Pete Heist <[email protected]> wrote: > > >> > > >> tcpdump -r file.pcap udp port 2112 and greater 80 and "ip[1] != 0x1” > > >> > > >> “greater 80” ignores the handshake packets and 0x1 is whatever TOS > > >> value we want to make sure the packets contain. We can use different > > >> filters for other traffic. > > > > > Bear in mind that the TOS byte contains ECN as well as DSCP fields, > > and > > > the latter is left-justified. > > > > libpcap should probably learn about DSCN bits to avoid people having to > > think so much :-)
Well, I still have nothing better than tcptrace + xplot. > > > > Send patches to me/github. > > > > Libpcap is ancient history by now. It is like ifconfig, everyone still can't > reprogram > their brain; but the tool is on life support. > > All development is happening on wireshark/tshark. > _______________________________________________ > Cake mailing list > [email protected] > https://lists.bufferbloat.net/listinfo/cake -- Dave Täht CTO, TekLibre, LLC http://www.teklibre.com Tel: 1-831-205-9740 _______________________________________________ Cake mailing list [email protected] https://lists.bufferbloat.net/listinfo/cake
