Project

General

Profile

Actions
Copy link

Task #5645

open

tracking: elephant flow detection

Added by Victor Julien about 2 years ago. Updated 22 days ago.

Status:
New
Priority:
High
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Subtasks 7 (6 open — 1 closed)

Feature #5646: rules: allow matching on flow pkts and bytes in either directionIn ReviewShivani BhardwajActions
Feature #5647: rules: mark flow as elephant flowIn ReviewShivani BhardwajActions
Feature #5648: flowworker: heuristic to see how busy a thread is with elephant flowsNewOISF DevActions
Feature #5649: eve.flow: add thread id(s) processing a flow to the recordNewOISF DevActions
Feature #5650: unix socket: query threads about most recent elephant flowsNewOISF DevActions
Feature #6164: rules: allow matching on flow pkts and bytesClosedPhilippe AntoineActions
Feature #7438: detect: add flow.rate keywordIn ReviewShivani BhardwajActions

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #3271: Add keyword to determine flow based speed/bwNewOISF DevActions
Actions
Copy link

Also available in: Atom PDF