We're updating the issue view to help you get more done. 

network_time() sometimes returns wall time if suspend_processing() and continue_processing() is used.

Description

I try to call network_time() inside of new_packet() event to get the packet timestamp for each packet. However, when this is used together with suspend_processing() and continue_processing(), the network_time() sometimes returns the wall time instead of the packet time. A bro script using Broker and the corresponding python program is given to reproduce the problem. To run the program, just put all the file in the same folder and use the "./bug_run.sh" command.

Environment

Ubuntu 16.04 LTS

Status

Assignee

Unassigned

Reporter

Wenyu Ren

Labels

External issue ID

None

Components

Affects versions

2.5

Priority

High