UDP

In the Nzyme web interface, UDP is logically grouped with TCP and called L4/Layer 4.

Session / Conversation Reassembly

Even though UDP does not have connections" or sessions, Nzyme is reassembling UDP data into what it calls conversations* wherever possible. This allows handling the traffic similar to how TCP sessions are grouped.

Session Tagging

Nzyme applies tags to UDP conversations, depending on what content Nzyme believes is in the traffic. For example, it might tag a conversation as UDP.

Configuration

The most important UDP configuration takes place in your Nzyme tap configuration files:

[protocols.udp]
pipeline_size = 65535
processors = 3

Variable	Description
pipeline_size	The tap process moves data internally using in-memory pipelines. You may have to increase this value if you experience high throughput of UDP datagrams.
processors	How many CPU threads should be processing UDP data in parallel.