[Snort-users] OT- Can some confirm a TOS bit setting for me.

Ashley Thomas athomas at ...5484...
Thu Jan 23 12:01:09 EST 2003


I seems to be right. Can you give a hex dump of the packet ?

tcpdump -x



David E. Gianndrea wrote:

> Im using a packet generator to create packets with what I believe is 
> the IP
> precedence bits set to critical. Does this tcpdump trace indicate the 
> correct
> bits being set?
>
> dhcp61-0.4671 > 10.200.61.0.3000:  udp 160 [tos 0x5]  (ttl 125, id 
> 44882, len 188)
> dhcp61-0.4671 > 10.200.61.0.3000:  udp 160 [tos 0x5]  (ttl 125, id 
> 44883, len 188)
> dhcp61-0.4671 > 10.200.61.0.3000:  udp 160 [tos 0x5]  (ttl 125, id 
> 44884, len 188)
> dhcp61-0.4671 > 10.200.61.0.3000:  udp 160 [tos 0x5]  (ttl 125, id 
> 44885, len 188)
> dhcp61-0.4671 > 10.200.61.0.3000:  udp 160 [tos 0x5]  (ttl 125, id 
> 44886, len 188)
>
>
> Thanks in advance.
>
>


-- 
Ashley Thomas
Research scientist
College of Computing
Georgia Tech.






More information about the Snort-users mailing list