Project

General

Profile

Actions

Bug #8919

open
AB

ebpf bypass: flow end timestamp and age are the flow manager check time

Bug #8919: ebpf bypass: flow end timestamp and age are the flow manager check time

Added by Amir Boussejra 3 days ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
Affected Versions:
Effort:
medium
Difficulty:
Label:

Description

EBPFBypassUpdate() set f->lastts from the flow manager pass. This makes age reported inflated by timeout duration. If capture timeout conf is 100 second, age reported will always be 100 seconds, even for a 5 second flow.

I have an MR solving that by adding time info on bpf map like `packets` and `bytes` and using that on the userspace side to log the correct information (last time packet was seen).

No data to display

Actions

Also available in: PDF Atom