does anybody konw that the socket_event table can't record "nc ip port" events?