1. A computer-readable memory encoded with computer-executable instructions for performing operations to analyze a performance trace, the operations comprising: comparing a plurality of behavior descriptors to the performance trace, respective behavior descriptors of the plurality of behavior descriptors comprising a plurality of attributes, the plurality of attributes comprising recognition information characterizing another performance trace that matches that respective behavior descriptor, the recognition information further comprising at least one of a process name, a thread starting function, at least one function on a stack, a pair comprising a start indicator and an end indicator defining an operation of an application, and at least one file name; determining, based on the comparing, that at least one behavior descriptor from the plurality of behavior descriptors matches at least one portion of the performance trace; and in response to determining that the at least one behavior descriptor matches the at least one portion of the performance trace, accessing information on behavior associated with the at least one matching behavior descriptor.