Snort mailing list archives
RE: TOS
From: "Cessna, Michael" <MCessna () rtm com>
Date: Fri, 14 Sep 2001 16:49:54 -0400
TOS is a field of the IP header. It is made up of a 3bit precedence field, a 4bit TOS field and a 0 bit, for 8 total bits. For a listing of the TOS values try: "TCP/IP Illustrated Vol 1 The Protocols" by W. Richard Stevens (ISBN 0-201-633469) - Page 35 has a table of common TOS values I would highly recommend this book to anyone running snort. It gives a great in depth look at the IP protocol. I find myself constantly flipping open this book when I can't remember the exact format of a packet. Good luck, Mike -----Original Message----- From: snortlst snortlst [mailto:snortlst () hotmail com] Sent: Friday, September 14, 2001 9:51 AM To: snort-users () lists sourceforge net Subject: [Snort-users] TOS When I try to analyze packets I see TOS:0x0 How many types of services there are out there .... and is there any documentation that explains what are those hexa values stand for? Thanks.
Current thread:
- TOS snortlst snortlst (Sep 14)
- Re: TOS Beckster (Sep 14)
- False Alert and IP Number George D. Nincehelser (Sep 14)
- Re: False Alert and IP Number John Sage (Sep 15)
- False Alert and IP Number George D. Nincehelser (Sep 14)
- <Possible follow-ups>
- RE: TOS Cessna, Michael (Sep 14)
- Re: TOS Beckster (Sep 14)
