If a thread doesn't receive packets for a while the packet timestamp
will no longer be used to determine a reasonable minimum timestamp for
flow timeout handling.
To avoid issues with the minimum timestamp to be set a bit too
aggressively, increase the time a thread can be inactive.
if (t->type != TVT_PPT)
continue;
if (SCTIME_CMP_NEQ(t->pktts, nullts)) {
- SCTime_t sys_sec_stamp = SCTIME_ADD_SECS(t->sys_sec_stamp, 1);
+ SCTime_t sys_sec_stamp = SCTIME_ADD_SECS(t->sys_sec_stamp, 5);
/* ignore sleeping threads */
if (SCTIME_CMP_LT(sys_sec_stamp, now))
continue;