WebSockets in Cloudflare Logs

Hey everyone,

when fetching Cloudflare Logs with EdgeStartTimestamp, EdgeEndTimestamp and OriginResponseTime fields I get some results for a WebSocket (/socket.io/?EIO=3&transport=websocket) which I cannot explain:

  • EdgeEndTimestamp - EdgeStartTimestamp is a value > 10 seconds
  • OriginResponseTime / 10^6 is in the area of < 1 second

How are OriginResponseTime, EdgeEndTimestamp defined for something like a WebSocket where the connection was kept open?