just to clarify before I give up on mac os for auditing socket events with osquery, is there no way to see events fired for network connections despite enabling network audit flag in

audit_control

file? I got process_events to work, but that's not really helpful as I need srcIP, srcPort, dstIP, dstPort I was hoping to get scnetworks to work, but it is disabled atm. thank you, really appreciate the help here