Hi, I am using a utility which reads packets from ip_queue, queued by iptables capture on INPUT chain of filter table using QUEUE target. I am getting a wierd problem, the incoming TCP segments especially with size larger than around 200 bytes get corrupted. I took tcpdump on the machine and the data in the segments looks fine, but when read by utility, most of the TCP payload looks to be reset, and checksum value is same as was seen in the tcpdump traces taken on the interface. Is this a problem with ip_queue module, which is not being able to copy larger packets to user space. I have red hat enterprise linux 4, with kernel 2.6.9-42 and iptables version 1.2.11 The same utility works fine with kernel 2.4.26 and 2.6.18. My problem is i cannot change the kernel on the machine on which i am getting the problem. Can someone please help. thanks varun -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
