On Thu, Jan 09, 2025 at 02:15:37PM +0100, Florian Westphal wrote: > If kernel provided the event timestamp, then use it, else fall back > to gettimeofday. > > This needs a recent kernel with > netfilter: conntrack: add conntrack event timestamp > > and net.netfilter.nf_conntrack_timestamp sysctl set to 1. > > Signed-off-by: Florian Westphal <fw@xxxxxxxxx> Reviewed-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
