Follow-up action of NETOBSERV-25: https://docs.google.com/document/d/17Lnl1sEmoaXZylRIujIpiBMev9dQMzEcM1uDiD58taI/edit?usp=sharing

1. Create a basic BTF CO-RE flow extractor. It does not have to be complete, just enough to (a) evaluate whether Linux Kernel provides us the information we need (b) get familiarized with eBPF CO-RE tools.
2. Evaluate how simple is to add this flow extractor to current agents (Flowmill, Cilium, Stirling...) vs create our own simple reporting daemon.