This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

What happens with removed fields? Such as ipv6.traffic_class.dscp which is no longer present in Wireshark 2.0? Any replacements or something? Are these changes documented somewhere?

asked 23 Feb '16, 05:34

Aliniel's gravatar image

Aliniel
308915
accept rate: 100%


Unfortunately not really, except via the git commit messages, and even then it may not be spelt out in detail.

Arguably there should be a list of fields that have changed between releases, the command tshark -G fields will list all the fields in the version of tshark being run, this could be used as a basis of a diff, but that may not really be sufficient to indicate why a field was removed (or what it was renamed to).

In the case of the field you mention, that was replaced by ipv6.tclass.dscp.

permanent link

answered 23 Feb '16, 05:58

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

All display filter fields for all Wireshark releases since 1.0.0 are documented online at https://www.wireshark.org/docs/dfref/. For ipv6.traffic_class.dscp specifically, refer to https://www.wireshark.org/docs/dfref/i/ipv6.html where you find the following:

Field name                  Description                 Type                  Versions
ipv6.traffic_class.dscp     Differentiated Services     Unsigned integer,     1.4.0 to 1.12.9
                            Field                       4 bytes

As Graham mentioned, the field was replaced with ipv6.tclass.dscp, documented as:

ipv6.tclass.dscp            Differentiated Services     Unsigned integer,     2.0.0 to 2.0.1
                            Codepoint                   4 bytes

Here is the specific commit where the change was made and the reason for it: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commitdiff;h=9162177db968f1310d867c32d2920298302f01b5

permanent link

answered 23 Feb '16, 06:43

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%

Yeah, I know about the list. Still, there should be a note or a reference for the fields that got replaced, in my opinion.

(23 Feb '16, 06:48) Aliniel
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×33
×33

question asked: 23 Feb '16, 05:34

question was seen: 844 times

last updated: 23 Feb '16, 06:48

p​o​w​e​r​e​d by O​S​Q​A