Reduce UDP unidirectional score

This commit is contained in:
emanuele-f 2020-01-17 11:20:11 +01:00
parent 508d040a49
commit de7adeacfe

View file

@ -29,8 +29,11 @@ function script.hooks.all(now)
if(flow.getPacketsRcvd() == 0) then
-- Now check if the recipient isn't a broadcast/multicast address
if(flow.isServerUnicast()) then
-- TODO some UDP protocols are inherently unidirectional (e.g. Netflow/sflow)
-- they should be excluded
flow.setStatus(flow_consts.status_types.status_udp_unidirectional.status_id,
50--[[ flow score]], 50--[[ cli score ]], 10--[[ srv score ]])
5--[[ flow score]], 5--[[ cli score ]], 1--[[ srv score ]])
end
else
flow.clearStatus(flow_consts.status_types.status_udp_unidirectional.status_id)