Hi, which .h contains a correct struct tcp? I guess it is tcphdr from netinet/tcp.h, which only gives a doff (whole header length), so have to get payload, skip header length and read the options by byte? 2010/11/14 Yechiel Levi <gmistick@xxxxxxxxx>: > Hi, > > You should use the nfq_handle_packet method, and in the callback it > activates use a casting of tcp struct on the payload (nfq_get_payload > method) > > timestamp can be achieved from netfilter using the : > nfq_get_timestamp (struct nfq_data *nfad, struct timeval *tv) > cheer, Igor. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html