Skip to content

disable hardware NIC timestamping for capture #851

@mmguero

Description

@mmguero

A sensor was running into strange timestamps gathered by netsniff-ng and suricata.

We should disable NIC hardware-level timestamping and rely on host kernel time instead.

Hardware in question:

  • Intel X710 (10GbE SFP+)
  • Intel I226-V (2.5GbE-class consumer/embedded NIC)

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingcaptureRelating to pcap-capture containersensorFor issues dealing with the Hedgehog OS capture sensorsuricataRelating to Malcolm's use of Suricata

Type

Projects

Status

Done

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions