I've been able to get the same behavior in macOS Big Sur 11.2

Disregard this post

Allright! I imagined I would get better performance if I could get the filter to not capture the packets/flows at all. I might do some tests later, for the time being I'll just quickly return an allow verdict at the top of the handler. Thanks!