My use case is different, It is more about packet capturing on the endpoint than packet filtering. In my use case the filtering refers to filtering uninterested data.<p>Also, this is oriented to internal network endpoints not visible from Internet, so I don&#x27;t expect to receive massive network-intensive attacks.