Actions
Bug #7115
closeddpdk: timestamping packets through TSC does not yield the same time as kernel time
Affected Versions:
Effort:
Difficulty:
Label:
Description
According to https://forum.suricata.io/t/suricata-ahead-of-time/4716/9 timestamping packets through TSC counter can be a bit off from the kernel time. Originally implemented to have better precision and faster timestamping, it seems like it can shift a little from the kernel time.
Therefore I'd suggest to replace it with the standard kernel call (gettimeoftheday or SCGetTime) to get the timestamp.
Actions