pub struct FlowConfig {
pub tcp_established_timeout: Duration,
pub tcp_half_open_timeout: Duration,
pub tcp_time_wait_timeout: Duration,
pub udp_timeout: Duration,
pub max_reassembly_buffer: usize,
pub max_ooo_fragments: usize,
pub eviction_interval: Duration,
pub track_max_packet_len: bool,
pub track_max_flow_len: bool,
pub memory_budget: Option<usize>,
pub spill_dir: Option<PathBuf>,
}Expand description
Configuration for the flow extraction engine.
Controls timeouts, buffer limits, and eviction thresholds for conversation tracking and TCP stream reassembly.
Fields§
§tcp_established_timeout: DurationTimeout for established TCP connections (default: 86400s / 24h).
tcp_half_open_timeout: DurationTimeout for half-open TCP connections (SYN sent, no ACK) (default: 5s).
tcp_time_wait_timeout: DurationTimeout for TCP TIME_WAIT state (default: 120s).
udp_timeout: DurationTimeout for UDP pseudo-conversations (default: 120s).
max_reassembly_buffer: usizeMaximum reassembly buffer size per direction per flow (default: 16 MB).
max_ooo_fragments: usizeMaximum number of out-of-order fragments per direction (default: 100).
eviction_interval: DurationInterval between idle conversation eviction sweeps (default: 30s).
track_max_packet_len: boolTrack maximum packet length per direction (default: false).
track_max_flow_len: boolTrack maximum flow length per direction (default: false).
memory_budget: Option<usize>Total RAM budget for flow extraction (None = unlimited). When set, reassembly buffers will be spilled to disk when exceeded.
spill_dir: Option<PathBuf>Directory for spill files (None = system temp dir).
Trait Implementations§
Source§impl Clone for FlowConfig
impl Clone for FlowConfig
Source§fn clone(&self) -> FlowConfig
fn clone(&self) -> FlowConfig
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more