--- zzzz-none-000/linux-2.6.28.10/include/net/netfilter/nf_conntrack_tuple.h	2009-05-02 18:54:43.000000000 +0000
+++ fusiv-7390-686/linux-2.6.28.10/include/net/netfilter/nf_conntrack_tuple.h	2012-02-14 14:37:49.000000000 +0000
@@ -48,6 +48,9 @@
 	struct {
 		__be16 key;	/* GRE key is 32bit, PPtP only uses 16bit */
 	} gre;
+	struct {
+		__be16 spi;	
+	} esp;
 };
 
 /* The manipulable part of the tuple. */
@@ -89,6 +92,9 @@
 			struct {
 				__be16 key;
 			} gre;
+			struct {
+				__be16 spi;	
+			} esp;
 		} u;
 
 		/* The protocol. */