Hello ! My current work is around conntrack. The first I've found is, that some required configuration variables are not set by default: net.netfilter.nf_conntrack_acct = 1 net.netfilter.nf_conntrack_timestamp = 1 I added these to "/etc/sysctl.conf", but after a reboot, these are NOT set. I am looking for a workaround to set these variables. I am on Debian Jessie 8.6 (3.16.0-4-amd64) with conntrack 1.4. The other point is to understand the timefield, which you receive with "-o timestamp,ktimestamp": [1486897660.578827] What is this? If I translate the first part to long and add it to 1970/0/0, I get a time, which is about 5 minutes behind the reality. Is is a double/float with decimal point? Which unit it expresses? s/ms/µs/ns ?? If someone could shed some light onto this, I would be happy. Thanks anyway and best regards, Manfred -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html