[Oisf-devel] Mem leaks

[Victor Julien]

On 10/18/2011 03:38 PM, Martin Holste wrote:
> flow-timeouts:
>   default:
>     new: 1
>     established: 10
>     closed: 0
>     emergency_new: 1
>     emergency_established: 1
>     emergency_closed: 0
>   tcp:
>     new: 1
>     established: 10
>     closed: 0
>     emergency_new: 1
>     emergency_established: 5
>     emergency_closed: 0

This will mean that any tcp session that doesn't have a packet within 10
seconds of the previous will time out. With interactive sessions like
irc/ssh/etc or slow responding servers this will mean you might loose
detection as tracking and thus reassembly will stop.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------