Hello, I did start to work on AF_XDP support for Suricata. API was really easy to use via libbpf. >From Suricata point of view, the current system with default configuration is lacking an important information. I don't have access to the timestamp of the packet. I'm in particular interested by the hardware timestamp as it would allow to do reordering in some capture cases. Is there a way to get the information via AF_XDP. I've seen the discussion on hardware hints but there was no code example I was able to find. BR, -- Eric Leblond <eric@xxxxxxxxx>
|