#118 Incorrect capture duration reported

Closed
opened 6 years ago by carlos.garcia · 2 comments

After finishing analyzing and storing the statistics of the pcap file in 1, the reported duration is wrong. The reported statistics are:

PCAP FILE STATISTICS SUMMARY  ------------------------------
Total packet count:     78329145 packets
Recognized packets:     78329145 packets
Unrecognized packets:   0 PDUs
% Recognized packets:   100.0 %
% Unrecognized packets: 0.0 %
Last unknown PDU:       None
Capture duration:       0.4295 seconds
------------------------------------------------------------

Examining the database in query mode, we can see:

SELECT timestampLastPacket FROM file_statistics;
Query returned 1 record:

+----------------------------+
| timestampLastPacket        |
+----------------------------+
| 2018-04-04 07:15:00.331786 |
+----------------------------+
> SELECT timestampFirstPacket FROM file_statistics;
Query returned 1 record:

+----------------------------+
| timestampFirstPacket       |
+----------------------------+
| 2018-04-04 07:00:00.448274 |
+----------------------------+
After finishing analyzing and storing the statistics of the pcap file in [1], the reported duration is wrong. The reported statistics are: ``` PCAP FILE STATISTICS SUMMARY ------------------------------ Total packet count: 78329145 packets Recognized packets: 78329145 packets Unrecognized packets: 0 PDUs % Recognized packets: 100.0 % % Unrecognized packets: 0.0 % Last unknown PDU: None Capture duration: 0.4295 seconds ------------------------------------------------------------ ``` Examining the database in query mode, we can see: ``` SELECT timestampLastPacket FROM file_statistics; Query returned 1 record: +----------------------------+ | timestampLastPacket | +----------------------------+ | 2018-04-04 07:15:00.331786 | +----------------------------+ > SELECT timestampFirstPacket FROM file_statistics; Query returned 1 record: +----------------------------+ | timestampFirstPacket | +----------------------------+ | 2018-04-04 07:00:00.448274 | +----------------------------+ ``` [1]:http://www.fukuda-lab.org/mawilab/v1.1/2018/04/04/20180404.html
Jens Keim commented 6 years ago
Collaborator

Fixed. Merge into master coming with SMBScan fixes.

Fixed. Merge into master coming with SMBScan fixes.
Jens Keim referenced this issue from a commit 6 years ago
Jens Keim referenced this issue from a commit 6 years ago
Jens Keim commented 6 years ago
Collaborator

Fixed in commit 971df14819.

EDIT: Off-by-one-second error fixed in pull request #131.

Fixed in commit 971df14819410f7f0e351a6dbca9c5ac588af058. EDIT: Off-by-one-second error fixed in pull request #131.
Sign in to join this conversation.
No Milestone
No assignee
2 Participants
Loading...
Cancel
Save
There is no content yet.