Project

General

Profile

Actions

Feature #2410

open

Create a reset counter and track maximum number of parallel flows

Added by Maurizio Abba over 3 years ago. Updated about 2 years ago.

Status:
New
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

This feature introduces a new kind of counter that gets reset every time it's dumped. This feature is controlled by a flag, STATS_FLAGS_RESETTING, enabling the reset of the counter after running StatsOutput (or its equivalent StatsOutputCounterSocket).

Actions #1

Updated by Maurizio Abba over 3 years ago

UPDATE: after a first PR (https://github.com/OISF/suricata/pull/3146) I will modify the feature to provide both the new counter type and a counter that use this new feature (reset after every dump).
This counter will report the maximum number of parallel flows Suricata is tracking. This counter is updated every time a flow is created/destroyed.

Actions #2

Updated by Maurizio Abba over 3 years ago

  • Subject changed from Create a counter that gets reset after every dump to Create a reset counter and track maximum number of parallel flows
Actions #3

Updated by Andreas Herz over 3 years ago

  • Target version set to TBD
Actions #4

Updated by Victor Julien about 2 years ago

  • Status changed from Assigned to New
  • Assignee changed from Maurizio Abba to Community Ticket

The reset counter concept can perhaps also be considered implemented by the 'delta' logging?

Actions

Also available in: Atom PDF