Hello: Shanker Balan wrote, > tc filter add dev eth0 parent 1:0 protocol ip prio 1 handle 1 fw classid 1:10 > iptables -t mangle -A PREROUTING -i eth0 -p tcp -d 192.168.1.24 > --dport 80 -j MARK --set-mark 1 Woohoo! I found my bug! It never quite occurred to me that marking has to be done on packets which _leave_ the interface! :-D tc filter add dev eth0 protocol ip parent 1:0 prio 1 handle 1 fw flowid 1:10 iptables -t mangle -A POSTROUTING -p tcp -s 192.168.1.24 --sport 80 -j MARK --set-mark 1 Thank you for your time. -- Shanu BTW: PiotR, thanx a lot for the wonderful rrdtool scripts, works great over here.