Compile a tcpdump-style filter string to bpf compatible with xtables.

Marshal a tcpdump-style filter string into bytes compatible with xtables.

Marshal a socket file descriptor into bytes compatible with xtables.

Marshal a pinned program path into bytes compatible with xtables.