Christian Priebe <chr.priebe@xxxxxxxxxxxxxx> wrote: > since Netfilter is working on the network level my understanding > would be that in case one want to use libnetfilter_queue to get to > the full content sent through a TCP connection, reassembly and > reordering of TCP segments have to be done by yourself. Yes. Depending on your requirements TPROXY could be an alternative. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html