Hello Pablo, here are two patches for conntrack(8). I want to alter the upper 8 bits of the conntrack mark while keeping the rest intact. At the moment it is only possible to specifiy an absolute value, so i've extended --mark to optionally handle a mask argument. Its possible to either filter by mark (e.g. list conntracks with a particular mark bit set) or to update parts of the mark. The 2nd patch is not absolutely needed, but it speeds up operation when only a couple of conntracks are affected by the modification. Thanks, Florian -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html