Hi, when reading queue data via the recv() function then one gets a return value much longer than the payload data, so there are some extra data after the payload. What kind of extra data is it? for example: rv = recv(fd, buf, sizeof(buf), 0); // rv=84 ... ret = nfq_get_payload(tb, &data); // ret=40 (ie. ip + tcp pkt, both w/o options, and tcp w/o user data) So, here, what are the extra 44 bytes after the tcp data? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html