* Roman Tsisyk: > 2. Correctly and fully fill all fields in a packet > As I pointed above, pcap-based tools can't correctly fill all fields, > e.g. output interface, nexthop, and AS (but I don't know where get AS > information in the kernel yet). (Older) IOS populates those fields from route tags found in the FIB. Quagga etc. would have to be taught to set these tags. The advantage is that no additional route lookups are required (at least when rp_filter is active). -- Florian Weimer <fweimer@xxxxxx> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html