Hello: I have written an LKM module that uses netfilter to capture packets. These packets are then sent to a hardware crypto device which after finishing, it's driver calls a callback, which then calls either an ip_rcv (inbound/decrypt) or an ip_send (outbound/encrypt) to deliver the packet. When netfilter captures icmp packets which are destined to the machine for which the Ipsec module is running on, I get kernel crashes. It only crashes when the icmp traffic is >= 10Mbits/sec. Are there some unpublished rules when processing icmp with Netfilter? Does anyone have some suggestions/recommendations? thanks Mike
