Re: question about flowmon

[Lloyd Wood <L.Wood@surrey.ac.uk>]

On Fri, 19 Nov 1999, Guo, Liang wrote:

> > It's not as elegant as a per-flow monitor controlled from Tcl; if I
> > had to monitor a specific flow I'd probably just cheat by putting a
> > test of f->flowid() in FlowMon::dumpflows before dumpflow is called,
> 
> Yes, I tried this trick, but the problem is about the memory, not the disk
> space. Since the flow monitor will take care of each flow that passed
> through it, so the slot table of the classifier of this flow monitor will
> keep growing as new flow comes in. In the case that there are a lot of
> small flows (hundreds of thousands), the slot table will be really huge. 

How could you safely remark flowids elsewhere to cut the slot table
down to two entries - one interesting flow and one flow of
uninteresting stuff?

L.

hey, it's just aggregation, right?

<L.Wood@surrey.ac.uk>PGP<http://www.ee.surrey.ac.uk/Personal/L.Wood/>