Actions
Bug #2394
closedPcap Directory May Miss Files
Affected Versions:
Effort:
Difficulty:
Label:
Description
Files that are dropped near to the processing time may be missed due to how pcap directory is advancing time.
Actions
Added by Danny Browning almost 8 years ago. Updated over 7 years ago.
Description
Files that are dropped near to the processing time may be missed due to how pcap directory is advancing time.
Can you give us more details about that?
Pcap directory mode was updating last processed time to the incorrect time, which combined with certain parameters (e.g. low poll and delay), files recently dropped in the directory could be missed. Pcap directory mode was also updating last processed time too frequently, which combined with OS precision could cause files to be marked done too early.