When setting the ToS Mask setting to 248 it is not working.

Document ID : KB000074299
Last Modified Date : 22/05/2018
Show Technical Document Details
When setting the ToS Mask setting to 248 it is not working.
A ToS Mask setting should remove the last two bytes of ToS ID's.  

For example a device that is sending both ToS 96 and ToS 98, with a ToS Mask of 248 applied the ToS 98 values should be combined with ToS 96.  However in 9.3.6 and 9.3.8 this is not working. 
NFA 9.3.6 
NFA 9.3.8
Defect DE323061.
We have released a patch for both NFA 9.3.6 and 9.3.8 to allow the ToS Mask setting to work properly.

To apply the patch follow the steps below:

1. Download the patch for your version of NFA from the links below:
For 9.3.6: ftp://ftp.ca.com/pub/netqos/product_patches/NFA/9.3.6/TosMask_DE323061_9.3.6.FIX_9.3.6.06.zip
For 9.3.8: ftp://ftp.ca.com/pub/netqos/product_patches/NFA/9.3.8/NFA_9.3.8_CP_001.zip

2. Stop all Harvester services.

3. Backup following files: [$INSTALL_DIR == The directory where CA NFA is installed, default C:\CA\]
    Note: These files will be required in future if you wish to uninstall the patch.

4. Extract the contents from the files into a clean directory.

5. Copy the "com.ca.im.ra.harvester.jar" to "$INSTALL_DIR\NFA\Netflow\bin".

6. Select "Replace the files in the destination" when prompted so that it replaces the jar file in bin directory of Netflow that was backed up in Step 2.

7. Restart all the Harvester services which were stopped in step 1.

8. If you are applying the 9.3.8 cumulative patch, please apply the console sides patches using the readme.

7. Confirm you ToS Masks show up properly. 
Additional Information:
For more information about ToS Mask see: https://docops.ca.com/ca-network-flow-analysis/9-3-8/en/managing/report-customizations/set-up-application-mapping/configure-global-settings-for-application-mapping