Skip to content

pcap: 60s active / 15s inactive timeouts (0.4.0) - #4

Open
josiahlashley21 wants to merge 1 commit into
mainfrom
pcap-active-inactive-timeouts
Open

pcap: 60s active / 15s inactive timeouts (0.4.0)#4
josiahlashley21 wants to merge 1 commit into
mainfrom
pcap-active-inactive-timeouts

Conversation

@josiahlashley21

@josiahlashley21 josiahlashley21 commented Aug 11, 2026

Copy link
Copy Markdown

Summary

  • Change PCAP flow-split defaults to active timeout 60s and inactive timeout 15s (was 1h max duration / 60s idle), with --active-timeout / --inactive-timeout CLI overrides.
  • Validate timeouts (> 0, inactive <= active); keep strict > split semantics; bump to 0.4.0.
  • Add glossary (CONTEXT.md), ADR 0001, unit tests for both split axes, and README updates.

Test plan

  • cargo test --locked (53 tests, including new pcap timeout tests)
  • cargo clippy --all-targets -- -D warnings
  • cargo fmt --all -- --check
  • Confirm CI green on the PR
  • Smoke: flowprep pcap sample.pcap out.parquet and with explicit timeout flags

Align flowprep pcap aggregation with common NetFlow exporter practice, expose integer-second CLI overrides, and document the breaking default change for 0.4.0.

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant