stackforge_core/flow/
config.rs

1use std::time::Duration;
2
3/// Configuration for the flow extraction engine.
4///
5/// Controls timeouts, buffer limits, and eviction thresholds for
6/// conversation tracking and TCP stream reassembly.
7#[derive(Debug, Clone)]
8pub struct FlowConfig {
9    /// Timeout for established TCP connections (default: 86400s / 24h).
10    pub tcp_established_timeout: Duration,
11    /// Timeout for half-open TCP connections (SYN sent, no ACK) (default: 5s).
12    pub tcp_half_open_timeout: Duration,
13    /// Timeout for TCP TIME_WAIT state (default: 120s).
14    pub tcp_time_wait_timeout: Duration,
15    /// Timeout for UDP pseudo-conversations (default: 120s).
16    pub udp_timeout: Duration,
17    /// Maximum reassembly buffer size per direction per flow (default: 16 MB).
18    pub max_reassembly_buffer: usize,
19    /// Maximum number of out-of-order fragments per direction (default: 100).
20    pub max_ooo_fragments: usize,
21    /// Interval between idle conversation eviction sweeps (default: 30s).
22    pub eviction_interval: Duration,
23}
24
25impl Default for FlowConfig {
26    fn default() -> Self {
27        Self {
28            tcp_established_timeout: Duration::from_secs(86_400),
29            tcp_half_open_timeout: Duration::from_secs(5),
30            tcp_time_wait_timeout: Duration::from_secs(120),
31            udp_timeout: Duration::from_secs(120),
32            max_reassembly_buffer: 16 * 1024 * 1024, // 16 MB
33            max_ooo_fragments: 100,
34            eviction_interval: Duration::from_secs(30),
35        }
36    }
37}
38
39#[cfg(test)]
40mod tests {
41    use super::*;
42
43    #[test]
44    fn test_default_config() {
45        let config = FlowConfig::default();
46        assert_eq!(config.tcp_established_timeout, Duration::from_secs(86_400));
47        assert_eq!(config.tcp_half_open_timeout, Duration::from_secs(5));
48        assert_eq!(config.tcp_time_wait_timeout, Duration::from_secs(120));
49        assert_eq!(config.udp_timeout, Duration::from_secs(120));
50        assert_eq!(config.max_reassembly_buffer, 16 * 1024 * 1024);
51        assert_eq!(config.max_ooo_fragments, 100);
52        assert_eq!(config.eviction_interval, Duration::from_secs(30));
53    }
54}
stackforge_core/flow/config.rs

stackforge_core/flow/
config.rs
