Session slicing (4-tuple) is a feature in DANZ Monitoring Fabric (DMF) that tracks TCP and now UDP sessions.  Configure a managed service on a Service Node specifying the packet count, after which the Service Node will start dropping the packets and stop forwarding them to tool nodes.