diff --git a/lib/conntrack.c b/lib/conntrack.c
index 83fc8f27728..49f6325d1b2 100644
--- a/lib/conntrack.c
+++ b/lib/conntrack.c
@@ -391,6 +391,7 @@ conntrack_destroy(struct conntrack *ct)
     ct_rwlock_unlock(&ct->resources_lock);
     ct_rwlock_destroy(&ct->resources_lock);
     ipf_destroy(ct->ipf);
+    free(ct);
 }
 
 static unsigned hash_to_bucket(uint32_t hash)