On Tue, Mar 9, 2021 at 12:37 PM Steven Rostedt <rost...@goodmis.org> wrote: > > The size of the fields and order changes all the time in various events. I > recommend doing so *all the time*. If you upgrade a kernel, then all the bpf > programs you have for that kernel should also be updated. You can't rely on > fields being the same, size or order. The best you can do is expect the > field to continue to exist, and that's not even a guarantee.
+1. Tracing bpf progs already do that. Old style tracing progs do it based on the kernel version. New style is using CO-RE.
