Well, what made me think about such an idea is the following.
I am doing several operations on each SKB and after confirming several tests (in a kinda nested manner) I realize that a packet needs
to be stolen.
The trouble is that I am doing in this in a long series of function calls so it would had looked ugly to propagate all my test results up to the hook function I have so I can know whether to return NF_ACCEPT or NF_STOLEN
Anyhow, I've already made the needed changes to reflect my 'tests' to the hook function so when they're all met, I return NF_STOLEN but was looking for something less messy.
Regards,
Adel