5 Replies Latest reply: Mar 13, 2018 5:28 AM by Dan Kidd RSS

TCPDump Custom Parameters to Filter DSCP EF

Dan Kidd

Hi

 

I am wonder if the custom parameter of the TCPDump facility is able to filter out DSCP EF marked packets? Due to high volume of traffic I dont want to capture all traffic and then filter via wireshark all packets marked with EF. It would be much cleaner and allow for longer packet captures of the custom para field can do this in TCPDump.
Does anyone know if this is possible?