Project

General

Profile

Actions
Copy link

Bug #7115

closed

dpdk: timestamping packets through TSC does not yield the same time as kernel time

Added by Lukas Sismis 4 months ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Lukas Sismis
Target version:
8.0.0-beta1
Affected Versions:
7.0.0
Effort:
Difficulty:
Label:

Description

According to https://forum.suricata.io/t/suricata-ahead-of-time/4716/9 timestamping packets through TSC counter can be a bit off from the kernel time. Originally implemented to have better precision and faster timestamping, it seems like it can shift a little from the kernel time.
Therefore I'd suggest to replace it with the standard kernel call (gettimeoftheday or SCGetTime) to get the timestamp.

Subtasks 1 (0 open — 1 closed)

Bug #7116: dpdk: timestamping packets through TSC does not yield the same time as kernel time (7.0.x backport)ClosedLukas SismisActions
Actions
Copy link
 #1

Updated by OISF Ticketbot 4 months ago

  • Subtask #7116 added
Actions
Copy link
 #2

Updated by OISF Ticketbot 4 months ago

  • Label deleted (Needs backport to 7.0)
Actions
Copy link
 #3

Updated by Victor Julien 4 months ago

Do we understand why these can differ?

Actions
Copy link
 #4

Updated by Lukas Sismis 4 months ago

  • Status changed from Assigned to Resolved

explanation in the commit message - TSC counter can drift over a long time,
merged in https://github.com/OISF/suricata/pull/11409

Actions
Copy link
 #5

Updated by Lukas Sismis 3 months ago

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: Atom PDF