fix data types

4 files changed, 13 insertions, 13 deletions

diff --git a/internal/c/tracepoints/close.c b/internal/c/tracepoints/close.c
index f98b39c..9d0b866 100644
--- a/internal/c/tracepoints/close.c
+++ b/internal/c/tracepoints/close.c
@@ -13,7 +13,7 @@ int handle_enter_close(struct trace_event_raw_sys_enter *ctx) {
     ev->op_id = CLOSE_ENTER_OP_ID;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
     ev->fd = (int)ctx->args[0];
 
     bpf_ringbuf_submit(ev, 0);
@@ -33,7 +33,7 @@ int handle_exit_close(struct trace_event_raw_sys_exit *ctx) {
     ev->op_id = CLOSE_EXIT_OP_ID;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
 
     bpf_ringbuf_submit(ev, 0);
 
diff --git a/internal/c/tracepoints/open.c b/internal/c/tracepoints/open.c
index 24f94b8..fa0fbf3 100644
--- a/internal/c/tracepoints/open.c
+++ b/internal/c/tracepoints/open.c
@@ -12,7 +12,7 @@ static __always_inline int _handle_enter_open(struct trace_event_raw_sys_enter *
     ev->op_id = op_id;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
 
     // Reset memory, as structure is re-used (ringbuffer)
     __builtin_memset(&(ev->filename), 0, sizeof(ev->filename) + sizeof(ev->comm));
@@ -35,7 +35,7 @@ static __always_inline int _handle_exit_open(struct trace_event_raw_sys_exit *ct
     ev->op_id = op_id;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
     ev->fd = ctx->ret;
 
     bpf_ringbuf_submit(ev, 0);
diff --git a/internal/c/tracepoints/write.c b/internal/c/tracepoints/write.c
index b79ae92..9771193 100644
--- a/internal/c/tracepoints/write.c
+++ b/internal/c/tracepoints/write.c
@@ -13,7 +13,7 @@ int handle_enter_write(struct trace_event_raw_sys_enter *ctx) {
     ev->op_id = WRITE_ENTER_OP_ID;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
     ev->fd = (int)ctx->args[0];
 
     bpf_ringbuf_submit(ev, 0);
@@ -33,7 +33,7 @@ int handle_exit_write(struct trace_event_raw_sys_exit *ctx) {
     ev->op_id = WRITE_EXIT_OP_ID;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
 
     ev->size = ctx->ret;
     bpf_ringbuf_submit(ev, 0);
diff --git a/internal/c/types.h b/internal/c/types.h
index b62c19a..abec562 100644
--- a/internal/c/types.h
+++ b/internal/c/types.h
@@ -20,14 +20,14 @@ struct null_event {
     __u32 op_id;
     __u32 pid;
     __u32 tid;
-    __u64 time;
+    __u32 time;
 };
 
 struct fd_event {
     __u32 op_id;
     __u32 pid;
     __u32 tid;
-    __u64 time;
+    __u32 time;
     __s32 fd;
 };
 
@@ -35,15 +35,15 @@ struct rw_event {
     __u32 op_id;
     __u32 pid;
     __u32 tid;
-    __u64 time;
-    __s64 size;
+    __u32 time;
+    __u64 size;
 };
 
 struct open_enter_event {
     __u32 op_id; 
-    char filename[MAX_FILENAME_LENGTH];
-    char comm[MAX_PROGNAME_LENGTH];
     __u32 pid;
     __u32 tid;
-    __u64 time;
+    __u32 time;
+    char filename[MAX_FILENAME_LENGTH];
+    char comm[MAX_PROGNAME_LENGTH];
 };