inspect packets in kernel level