On Thursday 30 August 2012 02:52:36 you wrote: > The problem seems to be the re-use of the conntrack timer. Races may > happen in entries that were just inserted in the dying list while > packets / ctnetlink still hold a reference to them. > > Would you give a try to this patch? Please, remove the previous I > sent. > > Let me know if you hit more crashes. Thanks. Hi Pablo, I successfully appied the patch against 3.4.10 but it is failing to compile, likely because of a lack of definition for the ecache struct. the specific error from gcc is: net/netfilter/nf_conntrack_core.c:258:9: error: dereferencing pointer to incomplete type (plus all the other relevant lines using the ecache ptr) Kind Regards, Oliver -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html