dear all, I'm using ip_queue for icmp and tcp packets like this: iptable -A INPUT -p icmp -j QUEUE iptables -A INPUT -p tcp --dport 80 -j QUEUE then, I run snort_inline like this: snort_inline -D -i eth1 -Q -A fast // which starts snort inline mode, capturing packets from ip_queue instead of pcap. the ip_queue generates these errors and drops all icmp and tcp/80 packets: An SKB was queued with no app data ip_queue: error creating packet message Build packet failed Do any of you know what's the solution to theses errors? regards, afshin
