The default BPF misses port 8000 traffic 

Make the default BPF a bit tighter. The default will cause cuckoo to miss all port 8000 traffic. Been meaning to send this for a bit.  Cuckoo used to be blind to all Neutrino EK traffic (port 8000) due to the default BPF although it seems to be dead now.  It also seems that the default BPF has gone through a couple of changes although the current version still needs an update it seems.