Dear All, Thank you for the suggestion, I use iptables connbytes facility to mark large packet, and it' works great. Sincerely, Rinto Exandi _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/