Hello, I've been struggling with this for a couple of days and am not sure how best to proceed. I need to do the usual duplicating and logging packets thing - with a twist in that I need to NAT the duplicated packets and send them out on a particular interface. I've been reading a lot of docs and FAQs, but it seems that I can't do this? Do I need to go through user space? ROUTE --tee seems not to allow you to do anything further with the packet unless I'm missing something? There were also some veiled references to MARK and iproute2 but nothing concrete that I can find. Has anyone done this or something similar? Any ideas? Or a pointer to a reference I've missed? thanks Ramen
