Project

General

Profile

Actions

Feature #1422

closed

Add hardware timestamping option to AF_PACKET capture

Added by Eric Leblond over 9 years ago. Updated about 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Current suricata is not able to use the hardware timestamping. To enable this, is is enough to call setsockopt with the PACKET_TIMESTAMP option. A good place to put that in is l.1411 in source-af-packet.c.

The possible option value regarding af_packet are:
- SOF_TIMESTAMPING_SYS_HARDWARE
- SOF_TIMESTAMPING_RAW_HARDWARE

(value define in linux/net_tstamp.h)

Actions

Also available in: Atom PDF