Chris Mi <cmi@xxxxxxxxxx> wrote: > > If so, what is the exact expectation? > > > > Could you propose a patch? As I said, I dislike tying this to sysctls. > > Sure. I will add more debug log to understand the function > nf_tcp_handle_invalid() and propose a patch. Thanks! Earlier this year I had a look at conntrack <-> flowtable plumbing and found multiple issues. Not sure they are related, I am recovering the patches that I made back then and will post them asap after they cleared basic testing. I'll place you on CC.