extending dst_entry

hi!

i'd like to add an netfilter module, which limits the diversity of tcp/udp
ports for a given remote peer via a tocken bucket filter. the aim of that is
mainly an instant response to port scans. it's quite easy to modify the
"limit" module that netfilter has right now, but in opposite to this module
my module will need to store information with every remote peer instead of a
global match rule state.
so i'm thinking about extending dst_entry and further dst.c to contain
netfilter specific code, which lead to a not so nice spagetti code
architecture.

any other suggestions how i could store peer specific information without
implementing an dst_entry styled hashtable on my own?

clemens

please CC me, not on list.