Thanks! A LOT for testing. Auto add plugins (and plugins) and regexp in filters I need to compile libtool, libpcre To support SSH and SSL decryption openssl should do it. NAT, and sslstrip, you seem correct, I dont think this is compiled into kernel, and I still did not recieve kernel sources per request (would like to patch to open mode for adding packet injection also). So, this is possibly a no-go ATM. I did try echo "1" > /proc/sys/net/ipv4/ip_forward which seem without any effect.