Skip to content

The purpose of normalizing addresses #4664

Closed Answered by brancz
threadedstream asked this question in Q&A
Discussion options

You must be logged in to vote

Due to unknown memory regions and layout across multiple processes and hosts (including things like ASLR), we may get the same address from two processes that may actually be the same once normalized. This is helpful because it means that we can duplicate locations across processes which saves storage and memory during querying.

And in the future, we intend to use this same property to duplicate entire stacks so that the agent hashes stacks, sends only the stack hash to the server side, and only sends the entire stack with all its details if the server doesn't already know about it.

Replies: 2 comments

Comment options

You must be logged in to vote
0 replies
Answer selected by threadedstream
Comment options

You must be logged in to vote
0 replies
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants