From 97786c114951c30c85b84eb6e0cc62a0988f36a2 Mon Sep 17 00:00:00 2001 From: Adrian Pekar Date: Fri, 10 Jul 2026 06:59:13 +0200 Subject: [PATCH] Document packet.ip_tos in the NFPacket attribute table Companion to the nfstream feature PR exposing the IP DS field byte (IPv4 ToS / IPv6 Traffic Class) to NFPlugins as packet.ip_tos. --- docs/api.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/api.md b/docs/api.md index badca8e..e6227b4 100644 --- a/docs/api.md +++ b/docs/api.md @@ -287,6 +287,7 @@ information are exposed in an NFPacket (Network Flow Packet) which contains the | `protocol` | `int` | Transport layer protocol. | | `vlan_id` | `int` | Virtual LAN identifier. | | `ip_version` | `int` | IP version. | +| `ip_tos` | `int` | IP DS field byte (IPv4 ToS, IPv6 Traffic Class): DSCP and ECN markings. | | `ip_packet` | `bytes` | Raw content starting from IP Header. | | `direction` | `int` | Packet direction: 0 for src_to_dst and 1 for dst_to_src. | | `syn` | `bool` | TCP SYN Flag present. |