use syscallrecord struct in socketcall sanitize