These are my last questions. - i've specified in my code NFPROTO_IPV4 (family field in xt_target struct), this means that my packet is at layer 3? i.e. the layer 2 function has already processed it? - suppose that we are in layer N: skb->data and skb->tail mark the beginning and the end of header+data of layer N? thank you all guys, in primis Jan. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html