Hi, Sorry for the bad timing. Here attached the take#2 of the nf_conntrack_netlink port. It includes a layer-3 abstraction as suggested. Attached two patches: - required modifications for nf_conntrack (modifs-take2.patch) - a diff against ip_conntrack_netlink to make easy the review (x). The whole nf_conntrack_netlink file is available at: http://people.netfilter.org/pablo/nf_conntrack_netlink.c Cheers. -- Pablo