This is our old Q&A Site. Please post any new questions and answers at

How can i create a capture filter for CS4 traffic?

When I look at the captured traffic, I see the Differentiated Services Field: 0x80 (DSCP 0x20: Class Selector 4.

asked 28 Sep '11, 16:49

miler's gravatar image

accept rate: 100%

edited 30 Sep '11, 09:59

That worked perfectly, using ip[1] & 0xfc == 0x80 I was able to do perform a packet capture and only capture CS4 packets. Additionally, based on your response I was able to learn how to setup a capture filter for AF41: ip[1] & 0xfc == 0x88

I tested the AF41 filter and that worked as well.

Thanks for the solution.

permanent link

answered 30 Sep '11, 10:02

miler's gravatar image

accept rate: 100%

That would be ip[1] & 0xfc == 0x80

permanent link

answered 28 Sep '11, 23:42

Jaap's gravatar image

Jaap ♦
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 28 Sep '11, 16:49

question was seen: 4,755 times

last updated: 30 Sep '11, 10:02

p​o​w​e​r​e​d by O​S​Q​A