Support syscall event in save session

Signed-off-by: David Goulet <dgoulet@efficios.com>