Having read some more, I think a bridging network driver could be the thing I'm looking for, although I don't need any bridging functionality at all. Could anyone tell me if this concept is reasonable, pragmatic, bad or even impossible: - Writing a bridging network driver, meant to be connected only to a single physical NIC. - Consuming all UDP packets I'm interested in, managing some buffers inside the 'bridging driver' to be filled with these packets' payload - Setting up some kind of streaming to send these buffers to user space - Simply passing all 'other' network traffic through the bridging driver. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html