Hi Patrick, The first patch here re-works the conntrack event cache to use the extension infrastructure so there is an event cache per-conntrack. This is used by the second patch, which aims to improve ctnetlink reliability. Please, have a look at the patch descriptions for more details. If you like them, you can pull them from: git://1984.lsi.us.es/nf-next-2.6 master Wait for your comments! --- Pablo Neira Ayuso (2): netfilter: conntrack: optional reliable conntrack event delivery netfilter: conntrack: move event cache to conntrack extension infrastructure include/net/netfilter/nf_conntrack.h | 2 include/net/netfilter/nf_conntrack_ecache.h | 133 +++++++++-------- include/net/netfilter/nf_conntrack_extend.h | 2 include/net/netfilter/nf_conntrack_helper.h | 2 include/net/netns/conntrack.h | 7 + net/netfilter/nf_conntrack_core.c | 106 ++++++++++--- net/netfilter/nf_conntrack_ecache.c | 216 ++++++++++++++++++--------- net/netfilter/nf_conntrack_helper.c | 15 ++ net/netfilter/nf_conntrack_netlink.c | 94 +++++++----- 9 files changed, 379 insertions(+), 198 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html