Hi, This patch provides a fine-grain locking for the tcp helper in conntrack. A per-conntrack lock is used, instead of having a global lock to protect tcp specific data. If I'm missing something, please let me know. regards, Pablo