we are implementing a better socket_events in eBPF (we already have a process_events replacement that also tracks Docker containers)