From the libnetfilter_log doxygen, nflog_get_payload returns -1 on error, otherwise > 0.
See: http://www.netfilter.org/projects/libnetfilter_log/doxygen/group__Parsing.html#gad0be564b48c9cc3778568c789212cef6