Fix an incorrect comment

Change-Id: Ic60c67fcc554b5ceb0b359a992fafd0f84521eef
Reviewed-on: https://code.wireshark.org/review/4077
Reviewed-by: Martin Mathieson <martin.r.mathieson@googlemail.com>

diff --git a/epan/dissectors/packet-ipsec.c b/epan/dissectors/packet-ipsec.c
index d384f96b95fe7daeb20814b6fea0d6a9e8034477..cbae3832b1868f38a82d6f2ea76ee1c9bdfb47d9 100644 (file)
--- a/epan/dissectors/packet-ipsec.c
+++ b/epan/dissectors/packet-ipsec.c
@@ -496,6 +496,8 @@ static guint word_hash_func(gconstpointer v)
 }
 
 /* Results are stored here: framenum -> spi_status */
+/* N.B. only store entries for out-of-order frames, if there is no entry for
+   a given frame, it was found to be in-order */
 static GHashTable *esp_sequence_analysis_report_hash = NULL;
 
 /* During the first pass, update the SPI state.  If the sequence numbers
@@ -596,7 +598,7 @@ static gboolean g_esp_enable_authentication_check = FALSE;
 */
 static gboolean g_esp_enable_null_encryption_decode_heuristic = FALSE;
 
-/* Default to not doing ESP sequence analysis */
+/* Default to doing ESP sequence analysis */
 static gboolean g_esp_do_sequence_analysis = TRUE;
 
 /* Place AH payload in sub tree */