Hi, The linux skbuff structure has an unsigned char *data. I believe that it points to the actual data. What data is this? Is this the data for the network layer (ie could point to the transport layer header which is data for IP layer)? or is this the data for the transport layer? Also, what is the size of the unsigned char* data pointed to by this field? Is the unsigned int len or unsigned int truesize or unsigned int data_len the true lengths of this data? Any help will be greatly appreciated! Thanks and regards, Rajat. http://rajatswarup.blogspot.com/ -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/