Hi all,
I'm working on linux networking kernel because i need to create a ip/udp/ip encapsulation on packets that matches defined features.
I know that this type of packet modifications can be done using Netfiler (with iptables interface) or using xfrm policy.
Please can someone explain me the difference between Netfilter and XFRM framework or give me a link where find some documentation?

Thank you very much :-) !
chiodo