On 10/5/20 10:36 AM, Maciej Żenczykowski wrote: >> Don't bother. This helper is no go. > > I disagree on the 'no go' -- I do think we should have this helper. +1 > > Lets not make bpf even harder to use then it already is... > Logging is done using time of day; that is not a posix mistake but a real need. Users do not file complaints based on a server's boot time or some random monotonic time; they report a problem based on time-of-day. Allowing bpf programs to timeofday makes it easier to troubleshoot and correlate kernel side events to userspace logs.