can we only specifc traffic we want to sniff ? so maybe it will reduce cpu usage for example i only want to sniff nginx traffic