mirror of https://github.com/OISF/suricata
pcap-file: advance the directory watermark for all files
In continuous pcap-file directory mode, a file that makes InitPcapFile() fail (malformed content, not a pcap, unsupported link type, truncated header) was skipped without folding its mtime into last_time_seen. This caused the file(s) to be reinspected on every follow-up poll until a newer valid file was processed. Ticket: 9129pull/16497/head
parent
4488424129
commit
3fe8ac21d0
Loading…
Reference in New Issue