LinuxCBT BPF Edition encompasses: 1. Berkeley Packet Filters (BPF) Security.
LinuxCBT BPF Edition focuses on the implementation of Berkeley Packet Filters with common network analysis tools: TCPDump, Snort, and WireShark.
The ability to efficiently filter network traffic on today's high-throughput networks is key to proper recording and analysis. Various network intersections move disparate traffic, depending on perspective. Consequently, it can be superfluous to filter inappropriately, resulting in mounds of unparseable data.
If you are/will be responsible for handling packet logging and analysis for your organization, you will invariably search for inherent efficiencies that Berkeley Packet Filters (BPF) provide.