Ingress socket filter by mark