Packet Filtering

In principle, the pseudo-devices involved with packet filtering are as follows:

• pf is involved in filtering network traffic
• bpf is an interface that captures and accesses raw network traffic.

The pf pseudo-device is implemented using pfil hooks; bpf is implemented as a tap in all the network drivers. We'll discuss them briefly from the point of view of their attachment to the rest of the stack.