search

fmadio / pcap2json

High Speed PCAP to JSON conversion utility
Other
97 stars 21 forks source link

IP DSCP flag #10

Closed fmadio closed 5 years ago

fmadio commented 5 years ago

add DSCP flags as part of the flow Hash + output the IP.DSCP into the flow data

fmadio commented 5 years ago

commited

fmadio commented 5 years ago

Outputs the raw DSCP numerical value, not sure if it should try enumerate the value into something more readable.

navinsaven commented 5 years ago

Perhaps converting the commonly used DSCP values as per https://en.wikipedia.org/wiki/Differentiated_services#Commonly_used_DSCP_values?

fmadio commented 5 years ago

Adding these strings in the JSON output ?

image

fmadio commented 5 years ago

included CS* values from here https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus1000/sw/4_0/qos/configuration/guide/nexus1000v_qos/qos_6dscp_val.pdf

fmadio commented 5 years ago

List of unknown DSCP values, good for now, closing

image

navinsaven commented 5 years ago

Yep. That's good. So the unknown values are in hex?

fmadio commented 5 years ago

Correct, if theres no string it writes it in hex. Data is from Interop17