[HN] Bypassing the Linux kernel for high-performance packet filtering