title: Advantage of kprobes over kretprobes
body: <p>Both kprobes and kretprobes allows you to put probe on a particular instruction in the kernel address.</p>
  
  <p>If you register a kprobe, the pre_handler gets executed before the actual function and post_handler after the actual function</p>
  
  <p>With kretprobes, you can get the entry_handler to execute before the actual function and ret_handler to execute after the actual function and it contain the return value of the function call.</p>
  
  <p>So, what is the advantage of using kprobes over kretprobes, as kretprobes has the feature of kprobes plus the return value of the function</p>