Relax ERF heuristic

Allow forward timestamp deltas up to 1 year, up from 7 days.
Surprisingly this was overly restrictive in some real cases.

Change-Id: I8a4bd1ca791b978aa5d2be40f7f8dd8e23db8837
Reviewed-on: https://code.wireshark.org/review/28882
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
This commit is contained in:
Stephen Donnelly 2018-07-31 11:50:43 +12:00 committed by Anders Broman
parent 933a48bc6b
commit ead3d6b8c5
1 changed files with 2 additions and 2 deletions

View File

@ -450,8 +450,8 @@ extern wtap_open_return_val erf_open(wtap *wth, int *err, gchar **err_info)
}
}
/* Check to see if timestamp increment is > 1 week */
if ( (valid_prev) && (ts > prevts) && (((ts-prevts)>>32) > 3600*24*7) ) {
/* Check to see if timestamp increment is > 1 year */
if ( (valid_prev) && (ts > prevts) && (((ts-prevts)>>32) > 3600*24*365) ) {
return WTAP_OPEN_NOT_MINE;
}