diff -Naur libnetfilter_conntrack-1.0.6-orig/include/libnetfilter_conntrack/libnetfilter_conntrack.h libnetfilter_conntrack-1.0.6-new/include/libnetfilter_conntrack/libnetfilter_conntrack.h
--- libnetfilter_conntrack-1.0.6-orig/include/libnetfilter_conntrack/libnetfilter_conntrack.h	2016-08-17 08:06:23.030385713 -0700
+++ libnetfilter_conntrack-1.0.6-new/include/libnetfilter_conntrack/libnetfilter_conntrack.h	2017-05-23 16:50:15.944113000 -0700
@@ -140,6 +140,12 @@
 	ATTR_REPL_ZONE,				/* u16 bits */
 	ATTR_SNAT_IPV6,				/* u128 bits */
 	ATTR_DNAT_IPV6,				/* u128 bits */
+        ATTR_ORIG_COMCERTO_FP_IIF,
+        ATTR_ORIG_COMCERTO_FP_IFINDEX,
+        ATTR_ORIG_COMCERTO_FP_MARK,
+        ATTR_REPL_COMCERTO_FP_IIF,
+        ATTR_REPL_COMCERTO_FP_IFINDEX,
+        ATTR_REPL_COMCERTO_FP_MARK,
 	ATTR_MAX
 };
 
@@ -792,6 +798,10 @@
 	/* Conntrack is a fake untracked entry */
 	IPS_UNTRACKED_BIT = 12,
 	IPS_UNTRACKED = (1 << IPS_UNTRACKED_BIT),
+
+	   /* Connection  cannot expire */
+	IPS_PERMANENT_BIT = 13,
+	IPS_PERMANENT = (1 << IPS_PERMANENT_BIT),
 };
 
 /* expectation flags */
