Korodev <korodev@xxxxxxxxx> wrote: > On Thu, May 21, 2020 at 6:26 PM Florian Westphal <fw@xxxxxxxxx> wrote: > > Its expected. If you want rx timestamps you should set > > SO_TIMESTAMP(NS) socket option, > > Thank you for your reply. My understanding is that SO_TIMESTAMP is a > socket option I could set for an application that I control, but how > would I go about enabling that such that IPTables, Netlink, and ULOGd > are aware? Setting this option makes the kernel record a timestamp at reception time for all packets it receives (it won't know the socket the packet will be delivered to yet, so it can't do this in a fine-grained way). This is off by default for performance reasons. Ideally ulogd should have an option to enable this (it doesn't have one). > I assumed I would at least get the software timestamp at > which the kernel received the packet. No, the kernel does not record a timestamp by default.