Add support to eBPF instead of Kernel Module for capturing system cal…

…ls (#3)

This will make the capture plugin with COS

refs #2