Toni
I had this already in my mind. But I thought nobody would be interested in having this feature. Will do ASAP.
Thanks! Hoping to get some feedback from you guys! (positive and negative) :smile_cat:
Hi Fred > we have used the 'ndpid.conf.example' (renamed ndpid.conf) you provide with the original source but those 3 options seems to act not correctly, we did not use them...
But I'll comment out `analysis = true`, which will disable the analysis completely and add some comments about memory consumption.
I've just tested the `analyse` event within `nDPId-test.c`. It works on my side. You may test this as well on your side by changing: ```C set_cmdarg_boolean(&nDPId_options.enable_data_analysis, 1); ``` to ```C...
> it seems the 'flow_id' becomes crazy using very old values when it should and id 2,000+ so after a while, a proto is with a strange (too big) size...
> Toni, have a look: > > ICMP: 1.3MB with 2 hits in the last 7 seconds. something is wrong here :o) > Regarding the ICMP flow (also from the...
> long time ago could mean 2+ hours ago ? hmmm, I'm not sure about that ;o) An ICMP flow is considered active as long as there is still data...
I'll reopen the issue although it might be better to split the issue into two.
You may now use branch https://github.com/utoni/nDPId/tree/tmp and run `./test/run_config_tests.sh` to test certain configurations placed in `./test/configs`.