1 2 3 4 5 6 7 8 9 10 11 12 13
table ip filter { ct expectation ctexpect { protocol tcp dport 9876 timeout 1m size 12 l3proto ip } chain c { ct expectation set "ctexpect" } }