M3 (#169). Fuse sFlow + BIRD session stats + conntrack + XDP counters into one detection view instead of sFlow alone.
Status: NONE (sFlow-only) · Size: M/L · Home: blackwall-flow.
Pro: higher confidence, fewer flukes. Con: builds on the anycast-aggregation work (#2).
M3 (#169). Fuse sFlow + BIRD session stats + conntrack + XDP counters into one detection view instead of sFlow alone.
Status: NONE (sFlow-only) · Size: M/L · Home: blackwall-flow.
Pro: higher confidence, fewer flukes. Con: builds on the anycast-aggregation work (#2).