Obviously, traffic control and iptables operate at the IP layer. But if I was to do any traffic shaping based on the known MAC address for hosts that are on my subnets, what would make the most sense? 1. The only way I can think of right now is, if running dhcpd, then reserve certain IP addresses for the MACs I want to do the filtering against. Then, do the filtering against those IP addresses instead. Seems inefficient maintenance since I have to track the MACs and the IPs. 2. The ARP table would also contain the information I need and if there was a way, when creating a filter, to specify a match param as a u32 for "whatever IP is tied to this MAC address" based on a very quick ARP cache lookup, that would do it. I wouldn't need to know the MAC. Is such a thing possible? If not, is this something that is possible with iptables, and I could then mark the packets and check against that in the qdisc? Thank you. -- To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html