(include my address in the replies, i am not subscribed to the list). hello all, Ok I have been stuck on this for tooo long and cant figure it out. I have made an LKM which registers to NF_POST_ROUTING hook. it gets a packet and if matches a certain criterion then it puts it on to my private Queue and returns NF_STOLEN. By putting the packet on the Queue I am delaying the packets by arround 4 ms. Now here is the problem for the case of a TCP packet: A TCP SYN was selected to be delayed. So my hook returns NF_STOLEN and the packet is sent 4 ms latter using ip_send(), initated by an ioctl called from a user application. next my host receives a syn+ack and imediately sends an ack. However the first data packet is sent out at a delay arround 4ms also. which is very odd. cuz in the user application the send function is called right after connect. I was expecting only the syn packet to be affected because of my delay, but there is some sort of reaction. I dont think that its because of some RTT calculations because when i send the SYN packet imdediately and delay it at the peer then the first data packet goes on fine. Now I have been stuck with this damn thing for a long while and cant figure out---is it the stealing that results in this. is this some expected behavior of TCP. .. please can u help me with this soon. regards, Asad ps: i can send you a trace plot of the tcp seq vs time as an attachment if you would like to see it. __________________________________ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree