Thanks a lot, it works but if there is no traffic on the connection socket, no RST is send. I had try "cutter" and it seems to work find in many situation. Anyway that is not part of this mailling list, thank you ----- Original Message ----- From: "Jan Engelhardt" <jengelh@xxxxxxxxxxxxxxx> To: "Eric Leblond" <eleblond@xxxxxx> Cc: "Michael Plourde" <mplourde@xxxxxxxxxx>; <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Monday, March 12, 2007 1:03 PM Subject: Re: nfnetlinkf ctnetlink ct-event > > On Mar 8 2007 21:19, Eric Leblond wrote: > > > >Le jeudi 08 mars 2007 à 14:43 -0500, Michael Plourde a écrit : > >> If i can patch my 2.4 kernel, is there a way to manage conntrack ? > >> (Other way than rmmod , insmod to flush all) > > > >Not really, you can only read /proc/net/ip_conntrack. One tool you can > >use is tcpkill available in dsniff. It can be used to kill some tcp > >connections by sending a TCP RST packet. > > There's the "conntrack" utility, but of course, it requires something > with a little more kick, like a 2.6 series kernel. > > >> ----- Original Message ----- > >> From: "Michael Plourde" <mplourde@xxxxxxxxxx> > >> To: <netfilter@xxxxxxxxxxxxxxxxxxx> > >> Sent: Thursday, March 08, 2007 11:28 AM > >> Subject: nfnetlinkf ctnetlink ct-event > >> > >> > >> > Hi, > >> > > >> > i want to patch my kernel 2.4.25 to use conntrack-1.00. > >> > Could someone give me tips and URL to get those patchs? > >> > > >> > Thanks, > > > >Cordialement, > >-- > >Eric Leblond <eleblond@xxxxxx> > >INL > > > > > > > > Jan > --