> What are you implementing? A layer four helper (like > ip_conntrack_proto_tcp.c?)
I previously implemented one Match module, and the trouble is: I need to release my own data when the conn_track is released. For I don't want to use timeout to judge the conn_track's release. > In CVS is a patch which adds a proto->destroy function to the l4 proto > helpers (ip_conntrack_protocol_destroy.patch) Now I implement one netfilter hook to trace the connection (TCP/UDP/*ICMP), and use ioctl(), to get the UI operation. Feel silly I am :( Thanks, Harald Welte. Regards, HouQing
