Hi this email is in reference to previous email regarding the NFCT_OF_TIMESTAMP, setting /proc/sys/net/netfilter/nf_conntrack_timestamp to 1 or 0 doesn't run the following code in /libnetfilter_conntrack-1.0.4/src/conntrack/snprintf_default.c file if (flags & NFCT_OF_TIMESTAMP) { if (test_bit(ATTR_TIMESTAMP_START, ct->head.set)) { ret = __snprintf_timestamp_start(buf+offset, len, ct); BUFFER_SIZE(ret, size, len, offset); } if (test_bit(ATTR_TIMESTAMP_STOP, ct->head.set)) { ret = __snprintf_timestamp_stop(buf+offset, len, ct); BUFFER_SIZE(ret, size, len, offset); } } flags and NFCT_OF_TIMESTMP is always 1 and 8 respectively no matter value of /proc/sys/net/netfilter/nf_conntrack_timestamp is 1 or 0 So what value should i set of nf_conntrack_timestamp if i want to get start and stop timestamp from __snprintf_timestamp_start and __snprintf_timestamp_stop respectively. Regards Ravin Goyal -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html