nat_p can match IPPROTO_TCP for, example, fragment packets that are not
at offset#0 where "tcp==NULL"
1 file changed