Minor: unsure the packet to steal is not returning to kernel.
Fix: class() and class_steering() functions take a class_mask