add another excellent article about BPF engine: https://www.kernel.org/doc/Documentation/networking/filter.txt