use syscallrecord struct in socket sanitize