sure. Currently filtering is in user mode..was trying to keep the kernel code minimal and as stateless as possible..but we could push the filters in kernel.