diff options
| author | Stephen Donnelly <stephen.donnelly@endace.com> | 2018-07-31 11:50:43 +1200 |
|---|---|---|
| committer | Anders Broman <a.broman58@gmail.com> | 2018-07-31 04:32:17 +0000 |
| commit | ead3d6b8c5d4ac0443566d02c2ff09742fba49b3 (patch) | |
| tree | 7d3203fbfd1f15020fafe7957db6102c3d65b0d3 /wiretap/erf.c | |
| parent | 933a48bc6b9ab9fccdd5f5ac4e5378f4e402a885 (diff) | |
Relax ERF heuristic
Allow forward timestamp deltas up to 1 year, up from 7 days.
Surprisingly this was overly restrictive in some real cases.
Change-Id: I8a4bd1ca791b978aa5d2be40f7f8dd8e23db8837
Reviewed-on: https://code.wireshark.org/review/28882
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Diffstat (limited to 'wiretap/erf.c')
| -rw-r--r-- | wiretap/erf.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/wiretap/erf.c b/wiretap/erf.c index 7b139de061..45884da253 100644 --- a/wiretap/erf.c +++ b/wiretap/erf.c @@ -450,8 +450,8 @@ extern wtap_open_return_val erf_open(wtap *wth, int *err, gchar **err_info) } } - /* Check to see if timestamp increment is > 1 week */ - if ( (valid_prev) && (ts > prevts) && (((ts-prevts)>>32) > 3600*24*7) ) { + /* Check to see if timestamp increment is > 1 year */ + if ( (valid_prev) && (ts > prevts) && (((ts-prevts)>>32) > 3600*24*365) ) { return WTAP_OPEN_NOT_MINE; } |