Actually sysdig can do application, container, host, network. Most of sysdig use cases tend to be more focused on the software running on a node vs the network itself.