pcap-linux: do not apply filter until VLAN tag is reconstructed

If a filter is applied in userspace, pcap_handle_packet_mmap() does so
before VLAN tag is reconstructed so that if TCI/TPID are provided
separately, "vlan" and "vlan <id>" filters don't work correctly.

Move userspace packet filtering after the VLAN tag reconstruction.