SPAF: Stateless FSA-based Packet Filters