Hi, Thanks to Chris and Pavel, you helped me to sharpen my question. so I rephrased my original question and learn things. At first glance the answer should be definitely YES. Since CAN-ID lives in sk_buff and Netfilter hook receives sk_buff as a parameter there should not be a problem But I did not find any such module by googling.