filt_bpfreadprocess
int filt_bpfreadprocess(struct knote *, struct kevent *);
.f_process = filt_bpfreadprocess,