Jiann-Ming Su wrote: > This is probably a dumb question, but is it possible to track > connections without iptables/netfilter? Yeah, use libpcap and parse it out yourself! (snicker) Exactly what are you looking for and why? A good chunk of netfilter is *just* connection tracking. What do you expect to get out of just conntrack?