I'm a very dumb programmer and i know little C, so i feel some fear to write here, but... i hope that someone here can take this as an exercise. ;-) I use by some year an accounting software called 'ipac-ng': http://ipac-ng.sourceforge.net/ substantially, that software add some ''no target'' rule via libiptables, and an helper program extract counter from them, building graphs. It is not realtime nor (i think) byte-accurate, but it is really 'lightweight'' compared to libpcap alternatives. Also, it is, ahem, in ''low maintenance mode''. ;) Recently i've upgraded from debian squeeze (so, iptables 1.4.8-3) to debian wheezy (so, iptables 1.4.14-3.1). After that upgrade, 'fetchipac' (the main binary that add the rules and extract data) start complaining about some extended parameters i use (MAC match): fetchipac: unrecognized option '--mac-source' and then sigsev. If i remove the ''extended parameters'', all work as expected. But clearly i need that. I've asked in ipac-ng lists[1], and a developer confirm me that seems a libiptables incompatibilites. Pointed me also against the guilty .c file: http://ipac-ng.cvs.sourceforge.net/viewvc/ipac-ng/ipac-ng/agents/iptables/iptables.c?view=markup where the most of the code are taken from iptables itself. The function prepare_entry() on line 834 roughly mimic the iptables command line parse (but only for the '-m' parameter!). So i've taken the relevant iptables code from 1.4.8 and 1.4.14, diff them and port back ipac-ng code[2]. I've reached the (for me, impressive! ;) result that the code compile and does not sigsev anymore. But still reply 'unrecognized option'. ;-( Someone can help me? Thanks. [1]: https://sourceforge.net/p/ipac-ng/mailman/ipac-ng-common/thread/20150205165940.GR3690%40sv.lnf.it/#msg33353346 [2]: my code on https://sourceforge.net/p/ipac-ng/mailman/message/33379160/ -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.sv.lnf.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/25/index.php/component/k2/item/123 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html