Damn, answered my own question after reading more.  The missing link 
appears to be a netgraph node that can take ethernet and strip out ip, 
or take ip and encapsulate it in ethernet.  Once that occurs, that will 
provide a way to hook the tee'd inet stream to both ng0 and ep0.  
Infact, would you even need ng0 to hook to if you had that missing 
netgraph module, you could just link direct to ep0 and be done with it.

Joshua Coombs