If this is an error (not sure if it is, but assuming  < 0 is an error), does it make sense to still call nflog_handle_packet()?