Our products are based on the io-net filter modules we've developed, and so far we've been unable to find any way to 
accomplish the same functionality in the new architecture.  We rely on the ability to filter packets seen by virtue of 
an interface being in promiscuous mode, and to keep them from ever reaching the stack (by either dropping them or 
sending them out another interface).  The BPF interface would let us see the packets, but not drop them, and would also 
probably be too slow (speed is critical in our applications).  The Packet Filter interface doesn't appear to be able to 
pass us anything not addressed to our own MAC address.  With io-net we had a nice way to intercept traffic and pass it 
up the stack, redirect it to another interface, or drop it.  We currently see no way to implement our products with io-
pkt!

Murf