[Oisf-devel] Mem leaks

[Martin Holste]

> This will mean that any tcp session that doesn't have a packet within 10
> seconds of the previous will time out. With interactive sessions like
> irc/ssh/etc or slow responding servers this will mean you might loose
> detection as tracking and thus reassembly will stop.

Yep, that's the trade-off we have to make for not dropping normal TCP
traffic.  As I asked above, how can one tell when the emergency state
is getting invoked, and how can one tell when the table is full
despite the emergency state?