table ip filter {
        ct timeout cttime {
                protocol tcp
                l3proto ip
                policy = { estabQisheestablished : 2m3s, cd : 2m3s, }
        }
}