session/tcp: filtering improvements