I'm capturing all the incoming/outgoing packets in my system(Linux). I'm using ulogd tool to do that. All the packets flow through IP table rules, and logging happens. My understanding is that logger takes some time to log the packets, and it becomes part of network latency. Is it correct? ( I did a basic ping test to the localhost with ulogd packet capturing/without ulogd packet capturing, and measured the rtt min/avg/max/mdev. I saw .006 ms difference between test(with ulogd) and test(without ulogd).
Does flow based logging avoids this kind of network latency in general? (Not specific to ulogd tool)