Fix for sniffer TCP sequence rollover. The math to detect and compute the rollover was off by one. ZD 12801.

This commit is contained in:
David Garske
2021-08-23 13:54:28 -07:00
parent 6ec28f508e
commit fe83d2d941

View File

@@ -4645,7 +4645,7 @@ static int AdjustSequence(TcpInfo* tcpInfo, SnifferSession* session,
/* handle rollover of sequence */
if (tcpInfo->sequence < seqStart)
real = 0xffffffffU - seqStart + tcpInfo->sequence;
real = 0xffffffffU - seqStart + tcpInfo->sequence + 1;
TraceRelativeSequence(*expected, real);