class

Filament::Flow::FlowTable

Inherits Enumerable < Reference < Object

Constructors

new(max_flows : Int32 = 100000, tcp_idle_timeout_sec : Float64 = 300.0, udp_idle_timeout_sec : Float64 = 60.0, tcp_closed_timeout_sec : Float64 = 15.0)

Source

Instance methods

clear

Clears all entries from the flow table

Source

each

Yields all currently tracked flow records

Source

expire_idle(now : Time) : Int32

Evicts inactive or terminated flows relative to a reference time

Source

find(key : FlowKey) : FlowRecord | Nil

Retrieves flow record by exact or reverse key

Source

max_flows

Source

process(packet : Dissect::DecodedPacket) : FlowRecord | Nil

Ingests a decoded packet into the conversation table Returns the associated FlowRecord (or nil if non-IP packet)

Source

size

Returns the number of elements in the collection.

[1, 2, 3, 4].size # => 4

Source

tcp_closed_timeout_sec

Source

tcp_idle_timeout_sec

Source

top_by_bytes(n : Int32 = 10) : Array(FlowRecord)

Returns top N flows sorted by total byte volume

Source

top_by_packets(n : Int32 = 10) : Array(FlowRecord)

Returns top N flows sorted by packet count

Source

udp_idle_timeout_sec

Source