>> [...packet filtering and spying and such...]

Rather than messing with lots of different filters, why not add new
primitives that - akin to find(1)'s -print or -ls - always succeed, but
specify the disposition of the packet?  Of course, there would be
problems; in particular, you would still have to impose an order on
multiple filters from multiple user-land processes...or does BPF impose
a restriction that makes that moot?

					der Mouse

			    mouse@collatz.mcrcim.mcgill.edu