Missed ts_boot for network events (#212)

elastic · Nov 8, 2024 · 05ce927 · 05ce927
1 parent 923ba94
commit 05ce927
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/GPL/Events/Network/Network.h b/GPL/Events/Network/Network.h
@@ -88,7 +88,8 @@ static int ebpf_network_event__fill(struct ebpf_net_event *evt, struct sock *sk)
     struct task_struct *task = (struct task_struct *)bpf_get_current_task();
     ebpf_pid_info__fill(&evt->pids, task);
     bpf_get_current_comm(evt->comm, TASK_COMM_LEN);
-    evt->hdr.ts = bpf_ktime_get_ns();
+    evt->hdr.ts      = bpf_ktime_get_ns();
+    evt->hdr.ts_boot = bpf_ktime_get_boot_ns_helper();
 
 out:
     return err;