doc: no need to define a set in ct state

ct state are flags, no need to define a set for this.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 1 insertions, 1 deletions

diff --git a/doc/statements.txt b/doc/statements.txt
index c1fd5e55..6fc0bda0 100644
--- a/doc/statements.txt
+++ b/doc/statements.txt
@@ -570,7 +570,7 @@ will be out-of-flow packets that were not matched by SYNPROXY.
     table ip x {
             chain z {
                     type filter hook input priority filter; policy accept;
-                    ct state { invalid, untracked } synproxy mss 1460 wscale 9 timestamp sack-perm
+                    ct state invalid, untracked synproxy mss 1460 wscale 9 timestamp sack-perm
                     ct state invalid drop
             }
     }