[deploy] #21 Multi-source correlation #183

New issue

Open

opened 2026-07-11 13:46:05 +00:00 by vxfemboy · 0 comments

vxfemboy commented

2026-07-11 13:46:05 +00:00

(Migrated from github.com)

M3 (#169). Fuse sFlow + BIRD session stats + conntrack + XDP counters into one detection view instead of sFlow alone.
Status: NONE (sFlow-only) · Size: M/L · Home: blackwall-flow.
Pro: higher confidence, fewer flukes. Con: builds on the anycast-aggregation work (#2).

**M3** ([#169](../169)). Fuse sFlow + BIRD session stats + conntrack + XDP counters into one detection view instead of sFlow alone. **Status:** NONE (sFlow-only) · **Size:** M/L · **Home:** blackwall-flow. **Pro:** higher confidence, fewer flukes. **Con:** builds on the anycast-aggregation work (#2).