How long does a flow needs to stay inactive before any resumption in activity is reported as a new flow
Huy N. Hang
hangh at cs.ucr.edu
Tue May 10 13:52:18 EDT 2011
Hello there,
I just started using Argus yesterday, and I am very happy with how easy
it is to use Argus.
I only have one question about the flow aggregation within Argus, and
I've read the manuals without being certain of what I found. And the
question is how long a flow needs to stay inactive before it is
concluded as finished and any resumption is considered as a new flow?
Does Argus use such a metric at all in its packet-to-flow aggregation?
Thanks!
More information about the argus
mailing list