This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Removed fields

0

What happens with removed fields? Such as ipv6.traffic_class.dscp which is no longer present in Wireshark 2.0? Any replacements or something? Are these changes documented somewhere?

asked 23 Feb '16, 05:34

Aliniel's gravatar image

Aliniel
30●8●9●15
accept rate: 100%

2 Answers:

1

Unfortunately not really, except via the git commit messages, and even then it may not be spelt out in detail.

Arguably there should be a list of fields that have changed between releases, the command tshark -G fields will list all the fields in the version of tshark being run, this could be used as a basis of a diff, but that may not really be sufficient to indicate why a field was removed (or what it was renamed to).

In the case of the field you mention, that was replaced by ipv6.tclass.dscp.

answered 23 Feb '16, 05:58

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206
accept rate: 22%

0

All display filter fields for all Wireshark releases since 1.0.0 are documented online at https://www.wireshark.org/docs/dfref/. For ipv6.traffic_class.dscp specifically, refer to https://www.wireshark.org/docs/dfref/i/ipv6.html where you find the following:

Field name                  Description                 Type                  Versions
ipv6.traffic_class.dscp     Differentiated Services     Unsigned integer,     1.4.0 to 1.12.9
                            Field                       4 bytes

As Graham mentioned, the field was replaced with ipv6.tclass.dscp, documented as:

ipv6.tclass.dscp            Differentiated Services     Unsigned integer,     2.0.0 to 2.0.1
                            Codepoint                   4 bytes

Here is the specific commit where the change was made and the reason for it: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commitdiff;h=9162177db968f1310d867c32d2920298302f01b5

answered 23 Feb '16, 06:43

cmaynard's gravatar image

cmaynard ♦♦
9.4k●10●38●142
accept rate: 20%

Yeah, I know about the list. Still, there should be a note or a reference for the fields that got replaced, in my opinion.

(23 Feb '16, 06:48) Aliniel