Pcap Directory May Miss Files
Files that are dropped near to the processing time may be missed due to how pcap directory is advancing time.
Updated by Danny Browning over 3 years ago
- Status changed from New to Assigned
Pcap directory mode was updating last processed time to the incorrect time, which combined with certain parameters (e.g. low poll and delay), files recently dropped in the directory could be missed. Pcap directory mode was also updating last processed time too frequently, which combined with OS precision could cause files to be marked done too early.