Why does NIST Net emulation only affect incoming traffic and not outgoing traffic?
Basically because it was easier (i.e., required less disruption of the kernel code) to do it that way. When NIST Net is used on a router, catching packets at receive time suffices to affect all traffic. This isn’t true on an end node, of course, but hopefully the provided capabilities will be sufficient. There are vague plans to redo the packet interception code to allow handling outgoing traffic too. Don’t expect this before Christmas 2000, though.