[
  {
    "event_type": 3,
    "timestamp_ns": 1000300000000,
    "pid": 1234,
    "cgroup_id": 1234567890,
    "comm": "myapp",
    "payload": {
      "family": 2,
      "old_state": 2,
      "new_state": 1,
      "sport": 45678,
      "dport": 5432,
      "saddr_v4": "10.0.0.5",
      "daddr_v4": "10.0.1.100"
    }
  },
  {
    "event_type": 3,
    "timestamp_ns": 1000400000000,
    "pid": 5678,
    "cgroup_id": 9876543210,
    "comm": "nginx",
    "payload": {
      "family": 2,
      "old_state": 0,
      "new_state": 1,
      "sport": 80,
      "dport": 54321,
      "saddr_v4": "0.0.0.0",
      "daddr_v4": "192.168.1.50"
    }
  }
]