Here is a patch against 2.4.8 that implements support for diverting network frames to an arbitrary kernel module. It is similar to the user-level packet diverter except that it handles both incoming and outgoing packets, and the module can discard the packet if it wants to. There is also a callback when a packet is freed. This allows a modular way of doing low-level packet frobbing without going out to userland. As noted in the code, it currently only supports 1 'diverter module', but it would be pretty easy to support more... Comments? Anyone find this sort of thing useful besides us? -- -Will :: AD6XL :: http://www.loopfree.net/ Orton :: finger will@tyranny.egregious.net for GPG public key