On Mon, 2012-04-02 at 12:47 +0800, Changli Gao wrote: > Got it. Thanks. FYI, the tcp options are copied to the stack before > being parsed. > What do you mean ? code looks like : const struct tcphdr *th = tcp_hdr(skb); int length = (th->doff * 4) - sizeof(struct tcphdr); ptr = (const unsigned char *)(th + 1); Therefore ptr points somewhere in skb->head ... -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html