move max analyze duration check before considering new packet