I've added these three patches to fix the allocation problems. I don't want to add the new module option introduced by Jozsef's patch since the current situation is just ridiculous, we need to search for both helpers and expectations twice for every new connection, so this needs to be redesigned anyway. It seems to work fine in some quick testing. This was the last problem I'm aware of, so I'm probably going to push all patches soon. Last thing is the helper renaming, any objections to prefix all helpers with nf_conntrack_helper_?