This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

After upgrading to 2.0.5 IP DSCP Value column shows in hex

0

I updated to 2.0.5 and now the IP DSCP Value is showing EF instead of 46 as example. It appears to be broke in 2.0.5 as 2.0.4 and below work just fine.

Anyone else or can this be redefined in custom?

asked 02 Aug '16, 11:51

r1limited's gravatar image

r1limited
6223
accept rate: 0%


One Answer:

0

The "new" display shows the function, not just the raw code. The code 46 stands for "Expedited Forwarding" or EF for short. The actual function code (46) can be seen if the field is expanded as shown below:

DiffServ field expanded

answered 02 Aug '16, 12:58

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

And if the DSCP field is added as a column it shows up as "Expedited Forwarding", similarly for tshark output:

Differentiated Services Field: 0xb8 (DSCP: EF PHB, ECN: Not-ECT)               
    1011 10.. = Differentiated Services Codepoint: Expedited Forwarding (46)   
    .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
(02 Aug '16, 13:53) grahamb ♦

Yes, I get that, I understand that, my point is it changed and now displays that value in the column field instead of the actual number. EF can be ef 46 ef 48 etc I want the honored value to show. I use this as a column to quick check that value

(02 Aug '16, 13:55) r1limited

This was done in response to bug 12429

(02 Aug '16, 14:02) Jaap ♦

Same here, I'm using 2 columns IP DSCP value and ip.dscp.field, but now it has no added value

(18 Aug '16, 01:15) kosz

If this is a problem, file a bug

(18 Aug '16, 21:40) Jaap ♦

Ya its a bloody problem

(19 Aug '16, 07:57) r1limited

Then file a bloody bug ;)

(19 Aug '16, 14:37) Jaap ♦
showing 5 of 7 show 2 more comments