Just an FYI, I've released iptstate 2.2.0. Version 2.2.0 marks the porting of iptstate to libnetfilter_conntrack (the new API, specifically). This allowed lots of new features in this version such as deleting states from the conntrack table, displaying the per-state bytes/packets counters, and more. Other features include better scrolling support, display of ICMP IDs, and support for having a state table larger than 32767 entries. http://www.phildev.net/iptstate/ Thanks to Pablo and everyone else here for answering my libnetfilter_conntrack questions! -- Phil Dibowitz phil@ipom.com Open Source software and tech docs Insanity Palace of Metallica http://www.phildev.net/ http://www.ipom.com/ "Never write it in C if you can do it in 'awk'; Never do it in 'awk' if 'sed' can handle it; Never use 'sed' when 'tr' can do the job; Never invoke 'tr' when 'cat' is sufficient; Avoid using 'cat' whenever possible" -- Taylor's Laws of Programming