Actions
Feature #8117
closedTask #5645: tracking: elephant flow detection
rules: flow.elephant keyword
Effort:
low
Difficulty:
low
Label:
Actions
Task #5645: tracking: elephant flow detection
Added by Philippe Antoine about 2 months ago. Updated 9 days ago.
Mentioned during Q&A at SuriCon 2025.
Not sure if this should be it's own keyword or that it should be part of the flow keyword since it's a flow flag.
In Review PR: https://github.com/OISF/suricata/pull/14363
Closed by: https://github.com/OISF/suricata/pull/14519