> Is there any way I can link or map the number shown in the secmark > field (secmark=XXX) when listing the current connections with "cat > /proc/net/ip_conntrack" or "cat /proc/net/nf_conntrack"? I should have been a bit clear - I need to map the number shown in the secmark field to the actual SELinux context - is that possible?