Under IPv4 Flowspec, the example provided for dscp is bogus, quoted below (it mentiones lengths). dscp numbers-match Set a matching DiffServ Code Point number (e.g. length > 1500;).