Jozsef Kadlecsik wrote: > I think the code segment is correct. However, the end of the segment > is miscalculated by segment_seq_plus_len because the offset added to > 'dataoff' by the get_l4proto function of IPv4/IPv6 is not taken into > account. Please check whether the patch below fixes it: Actually that offset should always be zero for anything but packets encapsulated within ICMP, which don't pass though TCP conntrack. - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html