Hello, ENOENT is not documented in the ERRORS section of getsockopt.2. But ENOENT can be returned for the option SO_ORIGINAL_DST, as can be seen here: https://github.com/torvalds/linux/blob/b00ed48bb0a7/net/netfilter/nf_conntrack_proto.c#L305-L305 Thanks,