Description
A userspace API for packets queued by the kernel packet filter, used by firewall tools that inspect or decide packet handling outside the kernel.
It is advanced packet-filtering infrastructure. Programs using it can affect live traffic, so administrators should test policies carefully before production use.