Actions
Feature #5646
openTask #5645: tracking: elephant flow detection
rules: allow matching on flow pkts and bytes
Description
Probably need some logic to express direction, e.g.
flow.pkts:toserver,>,10000; flow.pkts:either,=,10000; flow.bytes:both,>,1G;
Exact syntax TBD.
No data to display
Actions