AUDIT: Capture sys_socketcall arguments and sockaddrs