From fe83d2d941967829c3158000d49b168bdd3e1a1e Mon Sep 17 00:00:00 2001
From: David Garske <david@wolfssl.com>
Date: Mon, 23 Aug 2021 13:54:28 -0700
Subject: [PATCH] Fix for sniffer TCP sequence rollover. The math to detect and
 compute the rollover was off by one. ZD 12801.

---
 src/sniffer.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/sniffer.c b/src/sniffer.c
index 240f9f527..a668a301e 100644
--- a/src/sniffer.c
+++ b/src/sniffer.c
@@ -4645,7 +4645,7 @@ static int AdjustSequence(TcpInfo* tcpInfo, SnifferSession* session,
 
     /* handle rollover of sequence */
     if (tcpInfo->sequence < seqStart)
-        real = 0xffffffffU - seqStart + tcpInfo->sequence;
+        real = 0xffffffffU - seqStart + tcpInfo->sequence + 1;
 
     TraceRelativeSequence(*expected, real);