Hi, This is the v2 of the stateful object patchset that was posted earlier this week: http://marc.info/?l=netfilter-devel&m=148029128323837&w=2 Tentative userspace patchsets are available at: http://git.netfilter.org/libnftnl/log/?h=stateful http://git.netfilter.org/nftables/log/?h=stateful I may still revisit userspace before upstream merge, this may result in syntax changes, so consider the userspace patchset work-in-progress. Comments welcome, Thanks. Pablo Neira Ayuso (11): netfilter: nf_tables: add stateful objects netfilter: nft_counter: add stateful object type netfilter: nft_quota: add stateful object type netfilter: nf_tables: add stateful object reference expression netfilter: nf_tables: atomic dump and reset for stateful objects netfilter: nf_tables: notify internal updates of stateful objects netfilter: nft_quota: dump consumed quota netfilter: nft_quota: add depleted flag for objects netfilter: nf_tables: add stateful object reference to set elements netfilter: nft_objref: support for stateful object maps netfilter: nf_tables: allow to filter stateful object dumps by type include/net/netfilter/nf_tables.h | 95 +++++ include/uapi/linux/netfilter/nf_tables.h | 64 +++ net/netfilter/Kconfig | 6 + net/netfilter/Makefile | 1 + net/netfilter/nf_tables_api.c | 661 ++++++++++++++++++++++++++++++- net/netfilter/nft_counter.c | 163 ++++++-- net/netfilter/nft_objref.c | 226 +++++++++++ net/netfilter/nft_quota.c | 147 ++++++- 8 files changed, 1298 insertions(+), 65 deletions(-) create mode 100644 net/netfilter/nft_objref.c -- 2.1.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html