It would be nice to track "Differentiated Services" field (see RFC2474 ) and have it available as exported field in Packetbeat. It is the second bytes in the IPv4 header (the old TOS field) and bits 4 to 11 in the IPv6 header. Currently I have 3 class of service and I'm using the bpf_filter options…

Hi, This sounds like a useful feature to have. Do you mind creating an Enhancement Request at the Beats repo?

Export "Differentiated Services" (TOS) IPv4/IPv6 header field

guido.lamoto (Guido Lamoto) March 26, 2019, 8:51pm 3

Done.

Thank you again for your support.

Topic		Replies	Views
Supplement vlan.id to DNS data Beats packetbeat	2	448	March 27, 2023
Basic bytes/octets per second Beats packetbeat	3	1278	October 30, 2015
Network Packet Capture/Packetbeat Beats packetbeat	0	60	August 5, 2024
Metrics format recommendations? Beats	5	1101	September 29, 2015
Full packet inspection with beats? Beats	0	319	September 22, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Export "Differentiated Services" (TOS) IPv4/IPv6 header field

Related topics