> So in a crux, what can I do to ensure that openssl does not read app data > pkts > at all..
Nothing. You have no guarantee how many bytes the kernel's read() will hand back up to you. You will have to severely hack on your kernel and networking implementation to make this happen. You might find it easier to have the kernel do 'all' SSL, and then do callbacks/upcalls to user space for the non-kernel stuff. /r$ -- SOA Appliances Application Integration Middleware ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]