Add a more accurate BPF so we don't miss port 8000 traffic. Make results BPF tighter as well although probably needed in practice.