Hi, I want to capture Ethernet frames at kernel space and manipulate them. As I see it libnetfilter_queue is the easiest way to do it. Combined with iptables I get all IP packets, but I have a problem with non-IP packet (like ARP). I found ebtables with does handle non-IP packets, but I can't find a way to tell him to forward all the traffic to my netfilter queue (like I do with iptables). Is there a way to do it? Thanks in advance for any help. Regards, Mickey -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html