NFQUEUE

Also written: --queue-num

The Linux mechanism that queues packets for a program, such as Suricata, to decide whether to accept or drop them. It is how the lab runs an inline IPS.