Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Giuseppe Longo 769722101e decode: add flow memcap counter
This adds a counter indicating how many times
the flow max memcap has been reached

Since there is no always a reference to FlowManagerThreadData,
the counter is put in DecodeThreadVars.

Currently when there is no counter increase in one call of FlowGetNew
because we don't have tv or dtv at the time of the call.

The following is a snippet of the generated EVE entry:
"flow":{"memcap":0,"spare":10000,"emerg_mode_entered":0,"emerg_mode_over":0,"tcp_reuse":0,"memuse":7085248}
9 years ago
benches
contrib suri-graphite: add ouput to file option 10 years ago
doc Fix make distcheck on CentOS 5.11 10 years ago
lua output-lua: add SCPacketTimeString 11 years ago
m4
qa docker: add ASAN to pcaps build 10 years ago
rules decode: add ERSPANv1 decoder 10 years ago
scripts app-layer setup scripts: enable new modules on copy 9 years ago
src decode: add flow memcap counter 9 years ago
.gitignore unittest: make check use a qa/log dir for logging 12 years ago
.travis.yml travis-ci: use make check 11 years ago
COPYING GPL license sync with official gpl-2.0.txt 10 years ago
ChangeLog Update changelog for 2.1beta4 release 10 years ago
LICENSE GPL license sync with official gpl-2.0.txt 10 years ago
Makefile.am Respect DESTDIR in install-conf and install-rules. 10 years ago
Makefile.cvs
acsite.m4
autogen.sh
classification.config
config.rpath Add file needed for some autotools version. 12 years ago
configure.ac Feature 1527: ability to compile as a position independent executable 10 years ago
doxygen.cfg doxygen: add source browser 11 years ago
reference.config Update reference.config 10 years ago
suricata.yaml.in Describe new unified2-alert "payload" option 10 years ago
threshold.config