within osquery I believe the answer is not at this time, but openbsm never was? network filters via system extensions are I think maybe under the same umbrella as the endpoint security framework and the apple-recommended way to monitor/grab that I'd think