Project

General

Profile

Actions

Feature #2410

open
MA CT

Create a reset counter and track maximum number of parallel flows

Feature #2410: Create a reset counter and track maximum number of parallel flows

Added by Maurizio Abba over 8 years ago. Updated over 6 years ago.

Status:
New
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

This feature introduces a new kind of counter that gets reset every time it's dumped. This feature is controlled by a flag, STATS_FLAGS_RESETTING, enabling the reset of the counter after running StatsOutput (or its equivalent StatsOutputCounterSocket).

MA Updated by Maurizio Abba about 8 years ago Actions #1

UPDATE: after a first PR (https://github.com/OISF/suricata/pull/3146) I will modify the feature to provide both the new counter type and a counter that use this new feature (reset after every dump).
This counter will report the maximum number of parallel flows Suricata is tracking. This counter is updated every time a flow is created/destroyed.

MA Updated by Maurizio Abba about 8 years ago Actions #2

  • Subject changed from Create a counter that gets reset after every dump to Create a reset counter and track maximum number of parallel flows

AH Updated by Andreas Herz about 8 years ago Actions #3

  • Target version set to TBD

VJ Updated by Victor Julien over 6 years ago Actions #4

  • Status changed from Assigned to New
  • Assignee changed from Maurizio Abba to Community Ticket

The reset counter concept can perhaps also be considered implemented by the 'delta' logging?

Actions

Also available in: PDF Atom