Pablo Neira wrote:

> This patch provides a fine-grain locking for the tcp helper in 
> conntrack. A per-conntrack lock is used, instead of having a global 
> lock to protect tcp specific data. If I'm missing something, please 
> let me know.


oops, sorry, wrong patch, it doesn't compile, I made a mistake in the .h 
file, please review this patch instead.

regards,
Pablo