Hello, from api the attributes we can set for expectation only inclusive src,dst ip,port, and timeout, but from the kernel code like infunction "nf_ct_find_expectation" there is also a structure named "nf_conntrac_expect" with flags settings with NF_CT_EXPECT_PERMANENT which enable a permanent expectation, can the userland api in some ways to enable this feature too? wbr, -- Feng Wang Fakultät 5: Informatik, Elektrotechnik und Informationstechnik Universität Stuttgart Handy: +49 179 1403215 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html