Now instead of "conntrack -L -p tcp" you can do "conntrack -L -p 6" - useful for "unknown" proto's like gre, ah, esp. Thanks. -Bryan Duff