filt_bpfread
int filt_bpfread(struct knote *, long);
.f_event = filt_bpfread,
active = knote_modify_fn(kev, kn, filt_bpfread);
active = knote_process_fn(kn, kev, filt_bpfread);