Merge pull request #2757 in SNORT/snort3 from ~SUNIMUKH/snort3:elephant_flow to master

Squashed commit of the following:

commit b28012491788b2a71dacda895d85fee6a9be3422
Author: Sunirmal Mukherjee <sunimukh@cisco.com>
Date:   Mon Feb 22 00:42:49 2021 -0500

    flow: Add new flag to indicate elephant flow

diff --git a/src/flow/flow.h b/src/flow/flow.h
index c600d72ecfe0a13a6633be44589439962f310a8a..538ffe0e943256abd566a8a4bac0459e62f00f83 100644 (file)
--- a/src/flow/flow.h
+++ b/src/flow/flow.h
@@ -477,6 +477,7 @@ public:  // FIXIT-M privatize if possible
         bool use_direct_inject : 1;
         bool data_decrypted : 1;    // indicate data in current flow is decrypted TLS application data
         bool snort_proto_id_set_by_ha : 1;
+        bool efd_flow : 1;  // Indicate that current flow is an elephant flow
     } flags;
 
     FlowState flow_state;