> I'm not sure having over 65535 different events is a good idea. Perhaps > we should create a different type of uprobe that can be reused, as I'm > sure you are not making each of these events record different data. > Basically make it similar to the function tracing event, which is a > single event that records the function that it traces, and not > thousands of different individual events. > > Would something like that be helpful for you? It still requires a > kernel change, but that is still possible. You're right; the events record no data. Optimizing for this use-case sounds reasonable. It would be very helpful. The basic-block traces produced by this mechanism allow us to identify bugs introduced by transformations we make on the binaries. Kernel changes are no problem. -Anthony