3 files changed, 6 insertions, 6 deletions
diff --git a/internal/c/tracepoints/close.c b/internal/c/tracepoints/close.c
index f98b39c..9d0b866 100644
--- a/internal/c/tracepoints/close.c
+++ b/internal/c/tracepoints/close.c
@@ -13,7 +13,7 @@ int handle_enter_close(struct trace_event_raw_sys_enter *ctx) {
     ev->op_id = CLOSE_ENTER_OP_ID;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
     ev->fd = (int)ctx->args[0];
 
     bpf_ringbuf_submit(ev, 0);
@@ -33,7 +33,7 @@ int handle_exit_close(struct trace_event_raw_sys_exit *ctx) {
     ev->op_id = CLOSE_EXIT_OP_ID;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
 
     bpf_ringbuf_submit(ev, 0);
 
diff --git a/internal/c/tracepoints/open.c b/internal/c/tracepoints/open.c
index 24f94b8..fa0fbf3 100644
--- a/internal/c/tracepoints/open.c
+++ b/internal/c/tracepoints/open.c
@@ -12,7 +12,7 @@ static __always_inline int _handle_enter_open(struct trace_event_raw_sys_enter *
     ev->op_id = op_id;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
 
     // Reset memory, as structure is re-used (ringbuffer)
     __builtin_memset(&(ev->filename), 0, sizeof(ev->filename) + sizeof(ev->comm));
@@ -35,7 +35,7 @@ static __always_inline int _handle_exit_open(struct trace_event_raw_sys_exit *ct
     ev->op_id = op_id;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
     ev->fd = ctx->ret;
 
     bpf_ringbuf_submit(ev, 0);
diff --git a/internal/c/tracepoints/write.c b/internal/c/tracepoints/write.c
index b79ae92..9771193 100644
--- a/internal/c/tracepoints/write.c
+++ b/internal/c/tracepoints/write.c
@@ -13,7 +13,7 @@ int handle_enter_write(struct trace_event_raw_sys_enter *ctx) {
     ev->op_id = WRITE_ENTER_OP_ID;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
     ev->fd = (int)ctx->args[0];
 
     bpf_ringbuf_submit(ev, 0);
@@ -33,7 +33,7 @@ int handle_exit_write(struct trace_event_raw_sys_exit *ctx) {
     ev->op_id = WRITE_EXIT_OP_ID;
     ev->pid = pid;
     ev->tid = tid;
-    ev->time = bpf_ktime_get_ns();
+    ev->time = bpf_ktime_get_ns() / 1000;
 
     ev->size = ctx->ret;
     bpf_ringbuf_submit(ev, 0);