fix(ebpf): use correct syscall id for compat

[OriGlassman]

1. Explain what the PR does

use correct syscall id for compat

2. Explain how to test it

./tracee

3. Other comments

[NDStrahilevitz]

Is this intended to resolve the wrong 0xFFFFFFFF syscalls on exit?

[OriGlassman]

Is this intended to resolve the wrong 0xFFFFFFFF syscalls on exit?

For Compat syscalls, there was no translation to the non compat id. This meant that a check like
if (sys_id == SYSCALL_SOCKETCALL) ....
was never fulfilled (since sys_id was 102, but SYSCALL_SOCKETCALL is 476. After translation, sys_id is 476 as expected).

[yanivagman]

LGTM