The packet filter hooks feature includes the following significant functionalities:
Improved performance in comparison with the STREAMS module approach
Capability to intercept packets between zones
The packet filter hooks feature is part of a new API that is internal to the kernel. Developers can use the API to work with IP inside the kernel or to intercept packets.