Eric Leblond <eric@xxxxxxxxx> writes: > Hello, > > I did start to work on AF_XDP support for Suricata. API was really easy > to use via libbpf. > > From Suricata point of view, the current system with default > configuration is lacking an important information. I don't have access > to the timestamp of the packet. I'm in particular interested by the > hardware timestamp as it would allow to do reordering in some capture > cases. > > Is there a way to get the information via AF_XDP. I've seen the > discussion on hardware hints but there was no code example I was able > to find. Making more information from the hardware available to XDP is currently on our list of things we plan to enable in the future: https://github.com/xdp-project/xdp-project/blob/master/xdp-project.org#metadata-available-to-programs I just added timestamps as a field we want in there (so we don't forget). I.e., no, there is no way to get this information from XDP (and thus not from AF_XDP either) yet... -Toke
|