On Sat, May 11, 2019 at 08:54:57PM +0200, Stéphane Veyret wrote: > Hi Pablo, > > Le lun. 6 mai 2019 à 00:51, Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> a écrit : > > > NFT_CT_TIMEOUT, > > > NFT_CT_ID, > > > + NFT_CT_EXPECT, > > > > You don't this definition, or I don't find where this is used. > > As I told previously, I just copied the way timeout is built, and > therefore, it seems that NFT_CT_TIMEOUT is not used too. > But I actually saw today that these values are used in the « nftables > » project. There is a copy of nf_tables.h there. Not sure it is a good > idea to keep the variables in « nftables » and not in kernel. I have just updated the cached copy of nf_tables.h in git.netfilter.org: http://git.netfilter.org/nftables/commit/?id=d3869cae9d6232b9f3fa720e5516ece95fdbe73e Thanks.