Hi, Alexey When reading the code of kernel 2.6.0 test2, I found a problem in function xfrm_get_mss(): I think the last expression in xfrm_get_mss() should be "return res;" instead of "return res + dst->header_len;". Because the functionality of of xfrm_get_mss() should be to provide the length of "MTU - length of transformation header", I think it may be appropriate to "return res", which is just the length of "MTU - length of transformation header". Am I right? Thanks, Forrest - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html