Feature #2410
open
Create a reset counter and track maximum number of parallel flows
Added by Maurizio Abba almost 7 years ago.
Updated about 5 years ago.
Description
This feature introduces a new kind of counter that gets reset every time it's dumped. This feature is controlled by a flag, STATS_FLAGS_RESETTING, enabling the reset of the counter after running StatsOutput (or its equivalent StatsOutputCounterSocket).
UPDATE: after a first PR (https://github.com/OISF/suricata/pull/3146) I will modify the feature to provide both the new counter type and a counter that use this new feature (reset after every dump).
This counter will report the maximum number of parallel flows Suricata is tracking. This counter is updated every time a flow is created/destroyed.
- Subject changed from Create a counter that gets reset after every dump to Create a reset counter and track maximum number of parallel flows
- Target version set to TBD
- Status changed from Assigned to New
- Assignee changed from Maurizio Abba to Community Ticket
The reset counter concept can perhaps also be considered implemented by the 'delta' logging?
Also available in: Atom
PDF