Hello, On Fri, Aug 10, 2018 at 10:52 PM, Harsha Sharma <harshasharmaiitr@xxxxxxxxx> wrote: > If l3 protocol value is not specified for ct timeout object then use the > value from nft_ctx protocol family. I think I did this before but you asked me to change it (i.e put L3PROTO condition with other fields). But this is preferable as l3proto field is optional with nft syntax for adding ct timeout object. Also, the latest nft patch is based on this, so can you take this up ? Thanks a lot. Regards, Harsha Sharma