Paul Chaignon's GSoC status report - #9 of 12

[Eugene Syromyatnikov]

On Mon, Jul 29, 2019 at 9:21 PM Paul Chaignon <paul.chaignon at gmail.com> wrote:
> - Finished implementing generation of bit matching BPF program.  On a
>   first look, results are not as good as I expected.  For instance, for
>   x86_64 personality, when tracing a single syscall (bpf(2)), linear BPF
>   program has 8 instructions whereas binary match program has 35
>   instructions.  It would take a large number of traced syscalls to make
>   the binary match program the best choice...
What about -e trace=%net, %file, or other (popular) syscall class?

-- 
Eugene Syromyatnikov
mailto:evgsyr at gmail.com
xmpp:esyr at jabber.{ru|org}