[Snort-users] TOS

Cessna, Michael MCessna at ...3439...
Fri Sep 14 13:52:02 EDT 2001

 TOS is a field of the IP header. It is made up of a 3bit precedence field,
a 4bit TOS field and a 0 bit, for 8 total bits. For a listing of the TOS
values try:
"TCP/IP Illustrated Vol 1 The Protocols" by W. Richard Stevens (ISBN
0-201-633469)    - Page 35 has a table of common TOS values
I would highly recommend this book to anyone running snort. It gives a great
in depth look at the IP protocol. I find myself constantly flipping open
this book when I can't remember the exact format of a packet.
Good luck,

-----Original Message-----
From: snortlst snortlst [mailto:snortlst at ...125...]
Sent: Friday, September 14, 2001 9:51 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] TOS

When I try to analyze packets I see TOS:0x0
How many types of services there are out there .... and is there any
documentation that explains what are those hexa  values stand for?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20010914/1d482edb/attachment.html>

More information about the Snort-users mailing list