Decode events into pcap filters and timestamps.