Great post overviewing BPF and some programming advice for it.