Safe kernel extensions without run-time checking
the packet filter : an efficient mechanism for user - level network code .