I am using iptables and queue packets to user space. Packets are either augmented (with a signature) or shortened (removal of signature). The augmentation works. However, when removing the signature, the resulting packet contains the correct data, but its overall size is equal to the original (signed) packet. (i.e. original packet size: 83, signed packet size: 163) I checked this using ethereal on the receiving machine, which lists packets with the additional bytes (163-83=79) as trailer for the ethernet frame. (So, actually, the packet is processed correclty on the other side, however, the additional bytes seem odd to me) Any help would be great. P.S. I am new to mailing lists, I tried to be prepared and hope I did not make any major mistakes, appart from my bad english.