search

sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Other
886 stars 211 forks source link

Negative estimated time to finish UFDR processing #2064

Closed lfcnassif closed 5 months ago

lfcnassif commented 5 months ago

Reported by an user running 4.1.5 on UFDR evidence: image

wladimirleite commented 5 months ago

I came across this situation a few of weeks ago. However it was a small amount of negative seconds.

lfcnassif commented 5 months ago

I came across this situation a few of weeks ago. However it was a small amount of negative seconds.

Which version have you used? Just remembered you fixed a similar issue recently in master into ParsingTask, right? I'll ask the user to try the latest snapshot.

paulobreim commented 5 months ago

I've had this situation before, but I didn't care.

wladimirleite commented 5 months ago

Which version have you used?

I am 99% sure that I was using master, but I didn't take a screenshot.

Just remembered you fixed a similar issue recently in master into ParsingTask, right?

Right, but the other issue was with the elapsed time. This one affects the estimated time to finish, which is just a straightforward calculation (looking at the code). I see a couple of possible causes. I will try to reproduce it here when I get some time during this week.

lfcnassif commented 5 months ago

This one affects the estimated time to finish, which is just a straightforward calculation (looking at the code).

Yes, AFAIK it should use just the total volume found, volume processed and current running time to compute the estimated time to finish.

lfcnassif commented 5 months ago

PS: And those values seem fine.

wladimirleite commented 5 months ago

Reproduced with master branch, processing a UFDR. image

wladimirleite commented 5 months ago

I managed to find the root cause and fix it. I will post more details and submit a PR tomorrow.