Skip to main content

extract_flows_streaming

Function extract_flows_streaming 

Source
pub fn extract_flows_streaming<I>(
    packets: I,
    config: FlowConfig,
) -> Result<Vec<ConversationState>, FlowError>
Expand description

Extract flows from a streaming packet source (iterator).

Does not require all packets in memory simultaneously — each packet is processed and then dropped. Only conversation state (metadata + reassembly buffers) is retained.

If config.memory_budget is set, reassembly buffers will be spilled to disk when the budget is exceeded.