Skip to content

[conntrack] Self-correcting mechanism for existing UDP connections' direction #883

@SRodi

Description

@SRodi

Currently, for UDP connections that existed before Retina was deployed, conntrack uses a best-effort approach, relying on traffic direction based on the observation point. However, this method can be inaccurate. Implement a self-correcting mechanism in case the direction is incorrect. A possible solution could be using packet size and timing information to infer the direction of the connection.

FYI @nddq

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions