RawSockStopper returns a pair of functions to manage stopping code reading from a raw socket, readableOrStop blocks until fd is readable or stop was called.

Mode determines event source: kernel events or udev-processed events.

Events that are processed by udev - much richer, with more attributes (such as vendor info, serial numbers and more).

Generic connection.

RuleDefinitions is like chained rule with OR operator.