well i try to put this rule in Netfilter
iptables -A FORWARD -p udp -m limit --limit-burst 20 -j DROP
but when i sniff the traffic with Wireshark or tcpdump i found only 17 packets are dropped and some times 16.
and when i want to drop 200 packets i finf only 75 packets were dropped.
is there s.thing with the rule?? s.one told me about NFqueue, but i didn't understand.