Will someone please write a program that can be used to assist with u32 matches? What I envision is something like ipchains' "--check" option, which tests a packet against the selected chain. tcfilter should check against the loaded filters. It would be REALLY nice if: 1) counters (showing the number of hits (in packets)) could be included. 2) a debug mode showing what the packet header looks like, with options for hex or decimal - somewhat like an ASM DEBUG dump. This would show the packet being tested and, for each u32 entry, the decision to match or not... 3) the ability to test a packet against a single u32 entry. 4) a "trace" that would, where more than one filter matches, show which one was used. Another nice feature would be the ability to check for a fwmark. I can't pay for this, but perhaps I have something other than cash that you want? gypsy _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/