Harald, Here is my code. I avoided sending code in previous mail is just in the good sense of mail size. I know this code is not proper and can crash if someone delete the file in between module load and unload operation and after file deletion, module try to write_log. Infect this I wrote for the same purpose of what presently ipt_ACCOUNT is under discussion. I loved approach of /dev/accounting, Alternative of that was circular buffer in the same way of printk-buffer. I'm definitely not going to use file operation now but still I'm concern to know reason for kernel-oops. Also this list has got many request of per connection accounting support. Are you interested to support such a development? Could you take this RFP for the developers concern? Thanks, -- Sumit P.S. Whenever I'm hopeless, Harald is there ;) On Wed, Jun 04, 2003 at 01:27:11PM +0530, Sumit Pandya wrote: > Hi All, > I written a kernel module which registers hook for > ip_conntrack_destroyed. Purpose of this module is to log finish connection > as opposed to logging every packet of a connection provided by presently > netfilter targets (U)LOG. The module causes kernel __OOPS__ while it issues > fileP->f_op->write. I'm using kernel 2.4.20 from kernel.org. maybe you should accompany the sourcecode of your ipt_CONNLOG module in order to enable us to respond in any qualified manner?