Mojtaba <mespio@xxxxxxxxx> wrote: > Thanks Florian so much. > According the last paragraf of email i get the best way is i should use > libnetfilter_conntrack to insert a new conntrack entry in my userspace that > is called from raw PREROUTING table as NQUEUE callback queue. > Is it right underestanding? Yes, but since you did not exactly say what you're trying to do there might be better ways (ipvs, nft maps, etc). Nfqueue is slow.
