Project

General

Custom queries

Profile

Actions
Copy link

Task #5645

open

tracking: elephant flow detection

Added by Victor Julien over 2 years ago. Updated 3 months ago.

Status:
New
Priority:
High
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Subtasks 7 (5 open — 2 closed)

Feature #5646: rules: allow matching on flow pkts and bytes in either directionClosedShivani BhardwajActions
Feature #5647: rules: mark flow as elephant flowIn ReviewShivani BhardwajActions
Feature #5648: flowworker: heuristic to see how busy a thread is with elephant flowsNewOISF DevActions
Feature #5649: eve.flow: add thread id(s) processing a flow to the recordNewOISF DevActions
Feature #5650: unix socket: query threads about most recent elephant flowsNewOISF DevActions
Feature #6164: rules: allow matching on flow pkts and bytesClosedPhilippe AntoineActions
Feature #7438: detect: add flow.rate keywordAssignedShivani BhardwajActions

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #3271: Add keyword to determine flow based speed/bwNewOISF DevActions
#1

Updated by Victor Julien over 2 years ago

  • Subtask #5646 added
#2

Updated by Victor Julien over 2 years ago

  • Subtask #5647 added
#3

Updated by Victor Julien over 2 years ago

  • Subtask #5648 added
#4

Updated by Victor Julien over 2 years ago

  • Subtask #5649 added
#5

Updated by Victor Julien over 2 years ago

  • Subtask #5650 added
#6

Updated by Victor Julien over 2 years ago

  • Related to Feature #3271: Add keyword to determine flow based speed/bw added
#7

Updated by Shivani Bhardwaj 7 months ago

  • Subtask #6164 added
#9

Updated by Shivani Bhardwaj 4 months ago

  • Subtask #7438 added
Actions
Copy link

Also available in: Atom PDF