Hi I has a question about the tcp reopen request in func tcp_in_window. The code is below,what confuse me is that the var end is never after sender->td_end. static int tcp_in_window(struct ip_ct_tcp *state, ... if (sender->td_end == 0) { ... } else if (((state->state == TCP_CONNTRACK_SYN_SENT && dir == IP_CT_DIR_ORIGINAL) || (state->state == TCP_CONNTRACK_SYN_RECV && dir == IP_CT_DIR_REPLY)) && after(end, sender->td_end)) { ... } ... } When nf_conn rcv a syn request in TIME_WAIT state,the new_state is SYN_SNET. in func tcp_packet, this nf_conn will be kill by nf_ct_kill and the syn packet will repeat. So we will have a new nf_conn,whose sender->td_end is reset in func tcp_new. finally,when this syn packet arrive tcp_in_window,the var end is equal to sender->td_end. Maybe there is the other situation Or what I understand is totally wrong? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html