kernel.map
*.pcap
eth_null*