In message <Pine.LNX.4.10.9909261009430.7588-100001@netmonster.pakuni.net> you write: > Short Answer: Packet data payload, ports, protocols. Ah. OK, you want a generic packet classifier which hooks into PRE_ROUTING (maybe LOCAL_OUT) and sets the mark. There's a classifier in the sched/ code, or you could use iptables as a base. Yes, you have to write it. 8-) Rusty. -- Hacking time.