bugfix: the evt.type filter field now supports unparsed system calls