/* Define flow statistics constants */
#define FLOW_HASH_SIZE 10003
#define FLOW_REHASH_LOAD_FACTOR_HIGH 0.7
#define FLOW_INACTIVE_PERIOD 360
  
/* Define conn statistics constants */
#define GOOD_CONN_INACTIVE_PERIOD 360
#define TRAN_CONN_INACTIVE_PERIOD 120
#define CONN_HASH_SIZE 100003
#define CONN_REHASH_LOAD_FACTOR_HIGH 0.7

/* Define when should emergency clean-up be invoked */
#define FULL_ALERT_LF 0.9

/* Length of observation intervals */
#define FLOW_OBS_INTERVAL 1
#define CONN_OBS_INTERVAL 1

/* How fast rate_limit is decreased/increased */
#define DEC_SPEED 	2
#define INC_SPEED 	2
#define RATE_ALLOWED    5000
#define SLOW_RATE_INC   500
#define RATE_INC	1000

/* Penalty period given in number of observation periods */
#define COMPLIANT_PERIOD 20

/* Lowest and highest rate_limit allowed  */
#define MIN_RATE        2000
#define MAX_RATE        10000000 /* 10M */
 
/* Smoothing constant */
#define ALPHA 0.5

/* Allowed ratio for different protocols */
#define MAX_TCP_RTO 3
#define MAX_ICMP_RTO 1.1

/* Byte increment for force cleaning of hash tables */
#define BINCR 2000

/* Maximum number of UDP connections per destination */
#define MAX_UDP_CONNS 100

/* Minimum number of packets per connection */
#define MIN_PACKS_PER_UDP_CONN 3

/* Constants for new method for increasing and pulsing attack detection */
#define WINDOW 4
#define AVG_TIME 5
#define SAMPLING_PROB 0.6

#endif



















