Hi Florian, On Sat, Oct 26, 2024 at 12:50:13PM +0200, Florian Westphal wrote: > Sample start time at allocation time, not when the conntrack entry > is inserted into the hashtable. Back at the time, long time ago, I remember to have measured a performance impact on this. > In most cases this makes very little difference, but there are > cases where there is significant delay beteen allocation and > confirmation, e.g. when packets get queued to userspace. I delayed this to insertion time because packet could dropped before, rendering this conntrack timestamp useless? There is no event reporting for conntrack that never get confirmed.