{"action":"closed","issue":{"url":"https://api.github.com/repos/elektito/bttools/issues/13","labels_url":"https://api.github.com/repos/elektito/bttools/issues/13/labels{/name}","comments_url":"https://api.github.com/repos/elektito/bttools/issues/13/comments","events_url":"https://api.github.com/repos/elektito/bttools/issues/13/events","html_url":"https://github.com/elektito/bttools/issues/13","id":67780404,"number":13,"title":"There are way too many \"Invalid connid\" errors .","user":{"login":"elektito","id":28643,"avatar_url":"https://avatars.githubusercontent.com/u/28643?v=3","gravatar_id":"","url":"https://api.github.com/users/elektito","html_url":"https://github.com/elektito","followers_url":"https://api.github.com/users/elektito/followers","following_url":"https://api.github.com/users/elektito/following{/other_user}","gists_url":"https://api.github.com/users/elektito/gists{/gist_id}","starred_url":"https://api.github.com/users/elektito/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elektito/subscriptions","organizations_url":"https://api.github.com/users/elektito/orgs","repos_url":"https://api.github.com/users/elektito/repos","events_url":"https://api.github.com/users/elektito/events{/privacy}","received_events_url":"https://api.github.com/users/elektito/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/elektito/bttools/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":{"login":"elektito","id":28643,"avatar_url":"https://avatars.githubusercontent.com/u/28643?v=3","gravatar_id":"","url":"https://api.github.com/users/elektito","html_url":"https://github.com/elektito","followers_url":"https://api.github.com/users/elektito/followers","following_url":"https://api.github.com/users/elektito/following{/other_user}","gists_url":"https://api.github.com/users/elektito/gists{/gist_id}","starred_url":"https://api.github.com/users/elektito/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elektito/subscriptions","organizations_url":"https://api.github.com/users/elektito/orgs","repos_url":"https://api.github.com/users/elektito/repos","events_url":"https://api.github.com/users/elektito/events{/privacy}","received_events_url":"https://api.github.com/users/elektito/received_events","type":"User","site_admin":false},"milestone":null,"comments":0,"created_at":"2015-04-11T12:32:56Z","updated_at":"2015-04-11T15:03:39Z","closed_at":"2015-04-11T15:03:39Z","body":"There are too many \"Invalid connid\" errors. An inspection shows that sometimes a connection is shortly established and half-closed in a \"SYN=>STATE=>FIN\" sequence. When this happens, an entry is kept in the flow table for the flow and anything afterwards is ignored, even though a new connection can be established with a new connid.\r\n\r\nMaking connid a part of the flow tuple-id can fix this."}}