Attached is another netfilter patch for -stable, fixing a division by zero in the connbytes match, affecting kernels since about 2.6.16. Please apply, thanks.