Closed
Description
In code under /kern
, bpf_ktime_get_ns()
is being used to get the timestamp. This function returns kernel-space timestamp.
The timestamp along with other data is then returned to user-space. So converting it to user-space timestamp makes more sense, instead of keeping it as kernel timestamp. As end-user would be more interested to know at what user-time, specific event was received.
Refer: #418