Hi Pablo, > Does this guarantee that packets with NAT handlings go to the same queue? Yes, this is guaranteed by the way the hashing is done. And in fact it's very much necessary for applications like Snort e. g. /holger -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html