modify session manager related configuration
This commit is contained in:
@@ -10,7 +10,7 @@ dev_symbol = "nf_0_fw"
|
||||
dumpfile_path = "./pcap/test.pcap"
|
||||
#dumpfile_path = "/tmp/dumpfile/dumpfilelist"
|
||||
|
||||
nr_threads = 1 # [1, 256]
|
||||
nr_worker_thread = 1 # [1, 256]
|
||||
cpu_mask = [5, 6, 7, 8, 9, 10, 11, 12]
|
||||
|
||||
[ip_reassembly]
|
||||
@@ -29,40 +29,39 @@ tcp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
|
||||
udp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
|
||||
|
||||
# TCP timeout
|
||||
tcp_init_timeout = 50 # range: [1, 60000] (ms)
|
||||
tcp_handshake_timeout = 50 # range: [1, 60000] (ms)
|
||||
tcp_data_timeout = 50 # range: [1, 15999999000] (ms)
|
||||
tcp_half_closed_timeout = 50 # range: [1, 604800000] (ms)
|
||||
tcp_time_wait_timeout = 50 # range: [1, 600000] (ms)
|
||||
tcp_discard_timeout = 10 # range: [1, 15999999000] (ms)
|
||||
tcp_unverified_rst_timeout = 50 # range: [1, 600000] (ms)
|
||||
tcp_init_timeout_ms = 50 # range: [1, 60000] (ms)
|
||||
tcp_handshake_timeout_ms = 50 # range: [1, 60000] (ms)
|
||||
tcp_data_timeout_ms = 50 # range: [1, 15999999000] (ms)
|
||||
tcp_half_closed_timeout_ms = 50 # range: [1, 604800000] (ms)
|
||||
tcp_time_wait_timeout_ms = 50 # range: [1, 600000] (ms)
|
||||
tcp_discard_timeout_ms = 10 # range: [1, 15999999000] (ms)
|
||||
tcp_unverified_rst_timeout_ms = 50 # range: [1, 600000] (ms)
|
||||
# UDP timeout
|
||||
udp_data_timeout = 50 # range: [1, 15999999000] (ms)
|
||||
udp_discard_timeout = 50 # range: [1, 15999999000] (ms)
|
||||
udp_data_timeout_ms = 50 # range: [1, 15999999000] (ms)
|
||||
udp_discard_timeout_ms = 50 # range: [1, 15999999000] (ms)
|
||||
|
||||
# limit
|
||||
session_expire_polling_interval_ms = 0 # range: [0, 60000] (ms)
|
||||
session_expire_polling_limit = 1024 # range: [1, 1024]
|
||||
|
||||
# duplicate packet filter
|
||||
duplicated_packet_filter_enable = 1
|
||||
duplicated_packet_filter_capacity = 1000000 # range: [1, 4294967295]
|
||||
duplicated_packet_filter_timeout = 10000 # range: [1, 60000] (ms)
|
||||
duplicated_packet_filter_timeout_ms = 10000 # range: [1, 60000] (ms)
|
||||
duplicated_packet_filter_error_rate = 0.00001 # range: [0.0, 1.0]
|
||||
|
||||
# evicted session filter
|
||||
evicted_session_filter_enable = 1
|
||||
evicted_session_filter_capacity = 1000000 # range: [1, 4294967295]
|
||||
evicted_session_filter_timeout = 10000 # range: [1, 60000] (ms)
|
||||
evicted_session_filter_timeout_ms = 10000 # range: [1, 60000] (ms)
|
||||
evicted_session_filter_error_rate = 0.00001 # range: [0.0, 1.0]
|
||||
|
||||
# TCP reassembly (Per direction)
|
||||
tcp_reassembly_enable = 1
|
||||
tcp_reassembly_max_timeout = 10000 # range: [1, 60000] (ms)
|
||||
tcp_reassembly_max_segments = 256 # range: [2, 4096]
|
||||
tcp_reassembly_max_timeout_ms = 10000 # range: [1, 60000] (ms)
|
||||
tcp_reassembly_max_segments = 256 # range: [2, 4096]
|
||||
|
||||
[schedule]
|
||||
# Note: free_expired_session_interval determines the precision of session_manager timeout
|
||||
free_expired_session_interval = 50 # range: [1, 60000] (ms)
|
||||
free_expired_session_batch = 100 # range: [1, 60000]
|
||||
force_session_expire_before_exit = 0 # 1: force session to expire before exit, 0: wait for session to naturally expire before exit.
|
||||
|
||||
# Note: free_expired_ip_frag_interval determines the precision of ip_reassembly timeout
|
||||
free_expired_ip_frag_interval = 50 # range: [1, 60000] (ms)
|
||||
free_expired_ip_frag_batch = 100 # range: [1, 60000]
|
||||
|
||||
@@ -10,7 +10,7 @@ dev_symbol = "nf_0_fw"
|
||||
dumpfile_path = "/tmp/dumpfile/dumpfile.pcap"
|
||||
#dumpfile_path = "/tmp/dumpfile/dumpfilelist"
|
||||
|
||||
nr_threads = 1 # [1, 256]
|
||||
nr_worker_thread = 1 # [1, 256]
|
||||
cpu_mask = [5]
|
||||
|
||||
[ip_reassembly]
|
||||
@@ -29,40 +29,39 @@ tcp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
|
||||
udp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
|
||||
|
||||
# TCP timeout
|
||||
tcp_init_timeout = 50 # range: [1, 60000] (ms)
|
||||
tcp_handshake_timeout = 50 # range: [1, 60000] (ms)
|
||||
tcp_data_timeout = 50 # range: [1, 15999999000] (ms)
|
||||
tcp_half_closed_timeout = 50 # range: [1, 604800000] (ms)
|
||||
tcp_time_wait_timeout = 50 # range: [1, 600000] (ms)
|
||||
tcp_discard_timeout = 50 # range: [1, 15999999000] (ms)
|
||||
tcp_unverified_rst_timeout = 50 # range: [1, 600000] (ms)
|
||||
tcp_init_timeout_ms = 50 # range: [1, 60000] (ms)
|
||||
tcp_handshake_timeout_ms = 50 # range: [1, 60000] (ms)
|
||||
tcp_data_timeout_ms = 50 # range: [1, 15999999000] (ms)
|
||||
tcp_half_closed_timeout_ms = 50 # range: [1, 604800000] (ms)
|
||||
tcp_time_wait_timeout_ms = 50 # range: [1, 600000] (ms)
|
||||
tcp_discard_timeout_ms = 50 # range: [1, 15999999000] (ms)
|
||||
tcp_unverified_rst_timeout_ms = 50 # range: [1, 600000] (ms)
|
||||
# UDP timeout
|
||||
udp_data_timeout = 50 # range: [1, 15999999000] (ms)
|
||||
udp_discard_timeout = 50 # range: [1, 15999999000] (ms)
|
||||
udp_data_timeout_ms = 50 # range: [1, 15999999000] (ms)
|
||||
udp_discard_timeout_ms = 50 # range: [1, 15999999000] (ms)
|
||||
|
||||
# limit
|
||||
session_expire_polling_interval_ms = 0 # range: [0, 60000] (ms)
|
||||
session_expire_polling_limit = 1024 # range: [1, 1024]
|
||||
|
||||
# duplicate packet filter
|
||||
duplicated_packet_filter_enable = 1
|
||||
duplicated_packet_filter_capacity = 1000000 # range: [1, 4294967295]
|
||||
duplicated_packet_filter_timeout = 100 # range: [1, 60000] (ms)
|
||||
duplicated_packet_filter_timeout_ms = 100 # range: [1, 60000] (ms)
|
||||
duplicated_packet_filter_error_rate = 0.00001 # range: [0.0, 1.0]
|
||||
|
||||
# evicted session filter
|
||||
evicted_session_filter_enable = 1
|
||||
evicted_session_filter_capacity = 1000000 # range: [1, 4294967295]
|
||||
evicted_session_filter_timeout = 100 # range: [1, 60000] (ms)
|
||||
evicted_session_filter_timeout_ms = 100 # range: [1, 60000] (ms)
|
||||
evicted_session_filter_error_rate = 0.00001 # range: [0.0, 1.0]
|
||||
|
||||
# TCP reassembly (Per direction)
|
||||
tcp_reassembly_enable = 1
|
||||
tcp_reassembly_max_timeout = 10000 # range: [1, 60000] (ms)
|
||||
tcp_reassembly_max_segments = 128 # range: [2, 4096]
|
||||
tcp_reassembly_max_timeout_ms = 10000 # range: [1, 60000] (ms)
|
||||
tcp_reassembly_max_segments = 128 # range: [2, 4096]
|
||||
|
||||
[schedule]
|
||||
# Note: free_expired_session_interval determines the precision of session_manager timeout
|
||||
free_expired_session_interval = 50 # range: [1, 60000] (ms)
|
||||
free_expired_session_batch = 1000 # range: [1, 60000]
|
||||
force_session_expire_before_exit = 0 # 1: force session to expire before exit, 0: wait for session to naturally expire before exit.
|
||||
|
||||
# Note: free_expired_ip_frag_interval determines the precision of ip_reassembly timeout
|
||||
free_expired_ip_frag_interval = 50 # range: [1, 60000] (ms)
|
||||
free_expired_ip_frag_batch = 1000 # range: [1, 60000]
|
||||
|
||||
Reference in New Issue
Block a user