- [DONE] Switch from per-CPU call_stack tracking to per-task.
- [DONE] Fix stack stitching to support arbitrary number of stitched pieces.
- See if we can optimize the size of struct call_stack, it's pretty gigantic right now.
- Validate if recursive protection is still needed (at least on latest kernels).
- Minimize/prune BPF preset, it takes multiple minutes on a slightly older kernel.
- Add per-stack metadata:
- [DONE] timestamp;
- [DONE] PID/TID/UID.
- Capture input arguments for each function. Pretty-print them (e.g., const char * and struct bpf_attr *).
- [DONE] Add ability to provide lists of globs from file.