Ok, thanks for the explanation. seems fine to me. Now the only question is whether this wastes (significant) resources (i.e. resident set size or anything) in case ulogd2 runs on a small embedded box. If it is debugging-only, one could also enable it only for a debug-build (when -g / -pg is set) regards, -- - Harald Welte <laforge@xxxxxxxxxxxxx> http://netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html