some more about timestamps

debugging

1 files changed, 2 insertions, 1 deletions

diff --git a/maps.bpf.h b/maps.bpf.h
index c369037..9d795a8 100644
--- a/maps.bpf.h
+++ b/maps.bpf.h
@@ -18,7 +18,8 @@ struct {
 struct open_event {
     __s32 fd;
     __u32 tid;
-    __u64 time;
+    __u64 enter_time;
+    __u64 exit_time;
     char filename[MAX_FILENAME_LENGTH];
     char comm[MAX_PROGNAME_LENGTH];
 };