System Config

Recommended OS-level settings before running large FlowLog jobs.

Linux

Raise the kernel's per-process VMA cap so multi-threaded sweeps don't abort early.

Runtime (resets on reboot):

$ sudo sysctl -w vm.max_map_count=1048576

Persistent across reboots:

$ echo 'vm.max_map_count = 1048576' | sudo tee /etc/sysctl.d/99-flowlog-mmap.conf
$ sudo sysctl -p /etc/sysctl.d/99-flowlog-mmap.conf

macOS

To be documented.

Windows

To be documented.