1 2 3 4 5 6 7
table ip filter { ct timeout cttime { protocol tcp l3proto ip policy = { estabQisheestablished : 2m3s, cd : 2m3s, } } }