High Performance Packet Classification

Hi,

I just had a chance to skim through the code for iptables and nf-hipac. i am just curious to know what makes nf-hipac better than iptables. Any information about the algorithm can be useful.

Also, if nf-hipac aims to replace iptables maintaining the iptables' interface intact, why do we need a separate project? Instead, why can't the non-linear packet classification be adopted in iptables.

Regards,
Kumara Sundaram