$ cat /etc/pf.conf
#       $OpenBSD: pf.conf,v 1.34 2007/02/24 19:30:59 millert Exp $
#
# See pf.conf(5) and /usr/share/pf for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
# in /etc/sysctl.conf if packets are to be forwarded between interfaces.

ext_if="bge0"
int_if="bge1"
dmz_if="nfe0"
openvpn_if="tun0"
carp=" bge0 bge1 nfe0 "
pfsync="nfe1"

#table <spamd-white> persist
table <bruteforce> persist

set skip on lo
set block-policy return

#scrub in
nat on $ext_if from (carp1) -> (carp0:0)
rdr pass on $ext_if proto tcp from any to any port ssh \
        -> 127.0.0.1 port ssh
rdr pass on $ext_if proto { tcp udp } from any to any port domain \
        -> 127.0.0.1 port domain
rdr pass on $int_if proto { tcp udp } from any to any port domain \
        -> 127.0.0.1 port domain
rdr pass on $ext_if proto tcp from any to any port time \
        -> 127.0.0.1 port time

pass quick on $pfsync proto pfsync
pass quick on { $carp } proto carp

block in on $ext_if
pass in on $int_if
pass in on $dmz_if to ! $int_if:network
pass in proto icmp all label "in"
pass out keep state

antispoof quick for { lo $int_if }

pass in on $ext_if proto tcp to ($ext_if) port ssh queue (def_in, pri_in) \
        label "ssh-in"
pass in log on $ext_if proto tcp to ($ext_if) port smtp
pass out log on $ext_if proto tcp from ($ext_if) to port smtp
## openvpn
pass in on $ext_if proto { tcp udp } from any to any port 1194 \
        label "openvpn"

$ cat ifconfig.carp 
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33168
        groups: lo
        inet 127.0.0.1 netmask 0xff000000
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
nfe0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:16:36:76:17:3b
        description: dmz
        media: Ethernet autoselect (1000baseT full-duplex,master)
        status: active
        inet 172.17.254.254 netmask 0xffffff00 broadcast 172.17.254.255
        inet6 fe80::216:36ff:fe76:173b%nfe0 prefixlen 64 scopeid 0x1
nfe1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:16:36:76:17:3c
        description: pfsync
        media: Ethernet autoselect (1000baseT full-duplex)
        status: active
        inet 172.17.128.254 netmask 0xffffff00 broadcast 172.17.128.255
        inet6 fe80::216:36ff:fe76:173c%nfe1 prefixlen 64 scopeid 0x2
bge0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:16:36:76:17:39
        description: external gateway
        media: Ethernet autoselect (1000baseT full-duplex,rxpause,txpause)
        status: active
        inet6 fe80::216:36ff:fe76:1739%bge0 prefixlen 64 scopeid 0x3
bge1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:16:36:76:17:3a
        description: internal gateway
        media: Ethernet autoselect (1000baseT full-duplex,rxpause,txpause)
        status: active
        inet 172.17.1.254 netmask 0xffffff00 broadcast 172.17.1.255
        inet6 fe80::216:36ff:fe76:173a%bge1 prefixlen 64 scopeid 0x4
enc0: flags=0<> mtu 1536
pfsync0: flags=41<UP,RUNNING> mtu 1460
        pfsync: syncdev: nfe1 syncpeer: 224.0.0.240 maxupd: 128
        groups: carp pfsync
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33168
        groups: pflog
carp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:00:5e:00:01:01
        description: carp external gateway
        carp: MASTER carpdev bge0 vhid 1 advbase 1 advskew 0
        groups: carp egress
        inet6 fe80::200:5eff:fe00:101%carp0 prefixlen 64 scopeid 0x8
        inet 204.16.153.246 netmask 0xfffffffc broadcast 204.16.153.247
carp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:00:5e:00:01:01
        description: carp internal gateway
        carp: MASTER carpdev bge1 vhid 1 advbase 1 advskew 0
        groups: carp
        inet6 fe80::200:5eff:fe00:101%carp1 prefixlen 64 scopeid 0x9
        inet 172.17.1.1 netmask 0xffffff00 broadcast 172.17.1.255
carp2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:00:5e:00:01:02
        description: carp dmz
        carp: MASTER carpdev nfe0 vhid 2 advbase 1 advskew 0
        groups: carp
        inet6 fe80::200:5eff:fe00:102%carp2 prefixlen 64 scopeid 0xa
        inet 172.17.254.1 netmask 0xffffff00 broadcast 172.17.254.255


$  cat netstat.carp 
Routing tables

Internet:
Destination        Gateway            Flags    Refs      Use    Mtu  Interface
default            204.16.153.245     UGS         0        0      -   carp0
127/8              127.0.0.1          UGRS        0        0  33168   lo0
127.0.0.1          127.0.0.1          UH          0        0  33168   lo0
172.17.1/24        link#4             UC          0        0      -   bge1
172.17.1.1         172.17.1.1         UH          0        0      -   carp1
172.17.1.16        00:04:f2:15:04:4f  UHLc        0        0      -   bge1
172.17.128/24      link#2             UC          0        0      -   nfe1
172.17.254/24      link#1             UC          0        0      -   nfe0
172.17.254.1       172.17.254.1       UH          0        0      -   carp2
204.16.153.244/30  link#8             UC          0        0      -   carp0
204.16.153.245     00:01:97:36:b4:0a  UHLc        0        0      -   carp0
224/4              127.0.0.1          URS         0        0  33168   lo0


$ pfctl -sa
TRANSLATION RULES:
nat on bge0 from (carp1) to any -> (carp0:0)
rdr pass on bge0 inet proto tcp from any to any port = ssh -> 127.0.0.1 port 22
rdr pass on bge0 inet proto tcp from any to any port = domain -> 127.0.0.1 port 53
rdr pass on bge0 inet proto udp from any to any port = domain -> 127.0.0.1 port 53
rdr pass on bge1 inet proto tcp from any to any port = domain -> 127.0.0.1 port 53
rdr pass on bge1 inet proto udp from any to any port = domain -> 127.0.0.1 port 53
rdr pass on bge0 inet proto tcp from any to any port = time -> 127.0.0.1 port 37

FILTER RULES:
pass quick on bge0 proto carp all keep state
pass quick on bge1 proto carp all keep state
pass quick on nfe0 proto carp all keep state
pass quick on nfe1 proto pfsync all keep state
block return in on bge0 all
pass in on bge1 all flags S/SA keep state
pass in on nfe0 inet from any to ! 172.17.1.0/24 flags S/SA keep state
pass in proto icmp all keep state label "in"
pass out all flags S/SA keep state
block drop in quick on ! lo inet from 127.0.0.0/8 to any
block drop in quick on ! lo inet6 from ::1 to any
block drop in quick inet from 127.0.0.1 to any
block drop in quick on ! bge1 inet from 172.17.1.0/24 to any
block drop in quick inet from 172.17.1.254 to any
block drop in quick inet6 from ::1 to any
block drop in quick on lo0 inet6 from fe80::1 to any
block drop in quick on bge1 inet6 from fe80::216:36ff:fe76:173a to any
pass in on bge0 proto tcp from any to (bge0) port = ssh flags S/SA keep state label "ssh-in" queue(def_in, pri_in)
pass in log on bge0 proto tcp from any to (bge0) port = smtp flags S/SA keep state
pass out log on bge0 proto tcp from (bge0) to any port = smtp flags S/SA keep state
pass in on bge0 proto tcp from any to any port = 1194 flags S/SA keep state label "openvpn"
pass in on bge0 proto udp from any to any port = 1194 keep state label "openvpn"
No queue in use

STATES:
all ipv6-icmp :: -> ff02::1:ff76:173b       NO_TRAFFIC:NO_TRAFFIC
all ipv6-icmp :: -> ff02::1:ff76:1739       NO_TRAFFIC:NO_TRAFFIC
all ipv6-icmp :: -> ff02::1:ff76:173a       NO_TRAFFIC:NO_TRAFFIC
all pfsync 172.17.128.254 -> 224.0.0.240       SINGLE:NO_TRAFFIC
all ipv6-icmp :: -> ff02::1:ff76:173c       NO_TRAFFIC:NO_TRAFFIC
all tcp 74.56.158.194:1341 <- 172.17.1.101:52619       CLOSED:SYN_SENT
all tcp 172.17.1.101:52619 -> 74.56.158.194:1341       SYN_SENT:CLOSED
all tcp 74.56.212.200:58067 <- 172.17.1.101:52618       CLOSED:SYN_SENT
all tcp 172.17.1.101:52618 -> 74.56.212.200:58067       SYN_SENT:CLOSED
all tcp 76.209.51.87:80 <- 172.17.1.101:52604       CLOSED:SYN_SENT
all tcp 172.17.1.101:52604 -> 76.209.51.87:80       SYN_SENT:CLOSED
all tcp 74.125.19.91:80 <- 172.17.1.155:51662       CLOSED:SYN_SENT
all tcp 172.17.1.155:51662 -> 74.125.19.91:80       SYN_SENT:CLOSED
all udp 172.17.1.255:137 <- 172.17.1.52:137       NO_TRAFFIC:SINGLE
all tcp 74.125.19.19:80 <- 172.17.1.170:52290       CLOSED:SYN_SENT
all tcp 172.17.1.170:52290 -> 74.125.19.19:80       SYN_SENT:CLOSED
all tcp 74.125.19.19:80 <- 172.17.1.170:52289       CLOSED:SYN_SENT
all tcp 172.17.1.170:52289 -> 74.125.19.19:80       SYN_SENT:CLOSED
all udp 172.17.1.1:123 <- 172.17.1.86:123       MULTIPLE:MULTIPLE
all udp 172.17.1.255:137 <- 172.17.1.210:137       NO_TRAFFIC:SINGLE
all udp 172.17.1.1:123 <- 172.17.1.89:123       MULTIPLE:MULTIPLE
all icmp 172.17.1.1:34053 <- 172.17.1.97       0:0
all tcp 24.148.76.36:10489 <- 172.17.1.101:52623       CLOSED:SYN_SENT
all tcp 172.17.1.101:52623 -> 24.148.76.36:10489       SYN_SENT:CLOSED
all tcp 74.56.212.200:80 <- 172.17.1.101:52624       CLOSED:SYN_SENT
all tcp 172.17.1.101:52624 -> 74.56.212.200:80       SYN_SENT:CLOSED
all tcp 74.125.19.17:80 <- 172.17.1.231:62937       CLOSED:SYN_SENT
all tcp 172.17.1.231:62937 -> 74.125.19.17:80       SYN_SENT:CLOSED
all tcp 74.125.19.83:443 <- 172.17.1.52:3024       CLOSED:SYN_SENT
all tcp 172.17.1.52:3024 -> 74.125.19.83:443       SYN_SENT:CLOSED
all tcp 66.167.195.245:443 <- 172.17.1.101:52612       CLOSED:SYN_SENT
all tcp 172.17.1.101:52612 -> 66.167.195.245:443       SYN_SENT:CLOSED
all tcp 71.65.247.0:443 <- 172.17.1.101:52611       CLOSED:SYN_SENT
all tcp 172.17.1.101:52611 -> 71.65.247.0:443       SYN_SENT:CLOSED
all tcp 209.30.19.243:443 <- 172.17.1.101:52605       CLOSED:SYN_SENT
all tcp 172.17.1.101:52605 -> 209.30.19.243:443       SYN_SENT:CLOSED
all tcp 74.125.19.18:80 <- 172.17.1.252:63659       CLOSED:SYN_SENT
all tcp 172.17.1.252:63659 -> 74.125.19.18:80       SYN_SENT:CLOSED
all tcp 74.125.19.17:80 <- 172.17.1.200:51013       CLOSED:SYN_SENT
all tcp 172.17.1.200:51013 -> 74.125.19.17:80       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 192.228.79.201:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 198.32.64.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 192.203.230.10:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 202.12.27.33:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 198.41.0.4:53       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 192.36.148.17:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 128.63.2.53:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 192.58.128.30:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 192.5.5.241:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 192.112.36.4:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 128.8.10.90:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 193.0.14.129:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 192.33.4.12:53       SINGLE:NO_TRAFFIC
all tcp 172.17.1.145:22 <- 172.17.1.97:63863       CLOSED:SYN_SENT
all tcp 172.17.1.97:63863 -> 172.17.1.145:22       SYN_SENT:CLOSED
all udp 204.16.153.246:7605 -> 206.13.28.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:5671 -> 206.13.31.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:1842 -> 206.13.28.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17054 -> 206.13.31.12:53       SINGLE:NO_TRAFFIC
all tcp 69.180.221.160:80 <- 172.17.1.101:52620       CLOSED:SYN_SENT
all tcp 172.17.1.101:52620 -> 69.180.221.160:80       SYN_SENT:CLOSED
all tcp 69.180.221.160:26947 <- 172.17.1.101:52613       CLOSED:SYN_SENT
all tcp 172.17.1.101:52613 -> 69.180.221.160:26947       SYN_SENT:CLOSED
all tcp 79.3.114.6:35004 <- 172.17.1.101:52608       CLOSED:SYN_SENT
all tcp 172.17.1.101:52608 -> 79.3.114.6:35004       SYN_SENT:CLOSED
all tcp 74.125.19.83:80 <- 172.17.1.160:51280       CLOSED:SYN_SENT
all tcp 172.17.1.160:51280 -> 74.125.19.83:80       SYN_SENT:CLOSED
all tcp 74.56.212.200:443 <- 172.17.1.101:52621       CLOSED:SYN_SENT
all tcp 172.17.1.101:52621 -> 74.56.212.200:443       SYN_SENT:CLOSED
all udp 172.17.254.254:520 -> 172.17.254.255:520       SINGLE:NO_TRAFFIC
all udp 172.17.1.254:520 -> 172.17.1.255:520       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:520 -> 204.16.153.247:520       SINGLE:NO_TRAFFIC
all udp 172.17.128.254:520 -> 172.17.128.255:520       SINGLE:NO_TRAFFIC
all tcp 74.125.19.17:80 <- 172.17.1.200:51010       CLOSED:SYN_SENT
all tcp 172.17.1.200:51010 -> 74.125.19.17:80       SYN_SENT:CLOSED
all tcp 74.125.19.18:80 <- 172.17.1.243:58095       CLOSED:SYN_SENT
all tcp 172.17.1.243:58095 -> 74.125.19.18:80       SYN_SENT:CLOSED
all tcp 192.168.1.108:9100 <- 172.17.1.229:62843       CLOSED:SYN_SENT
all tcp 172.17.1.229:62843 -> 192.168.1.108:9100       SYN_SENT:CLOSED
all tcp 74.125.19.83:80 <- 172.17.1.160:51281       CLOSED:SYN_SENT
all tcp 172.17.1.160:51281 -> 74.125.19.83:80       SYN_SENT:CLOSED
all tcp 24.166.223.244:31181 <- 172.17.1.101:52622       CLOSED:SYN_SENT
all tcp 172.17.1.101:52622 -> 24.166.223.244:31181       SYN_SENT:CLOSED
all tcp 66.167.195.245:80 <- 172.17.1.101:52616       CLOSED:SYN_SENT
all tcp 172.17.1.101:52616 -> 66.167.195.245:80       SYN_SENT:CLOSED
all tcp 71.65.247.0:80 <- 172.17.1.101:52615       CLOSED:SYN_SENT
all tcp 172.17.1.101:52615 -> 71.65.247.0:80       SYN_SENT:CLOSED
all tcp 139.102.250.238:35072 <- 172.17.1.101:52614       CLOSED:SYN_SENT
all tcp 172.17.1.101:52614 -> 139.102.250.238:35072       SYN_SENT:CLOSED
all tcp 66.167.195.245:28086 <- 172.17.1.101:52610       CLOSED:SYN_SENT
all tcp 172.17.1.101:52610 -> 66.167.195.245:28086       SYN_SENT:CLOSED
all tcp 71.65.247.0:40779 <- 172.17.1.101:52609       CLOSED:SYN_SENT
all tcp 172.17.1.101:52609 -> 71.65.247.0:40779       SYN_SENT:CLOSED
all tcp 209.30.19.243:80 <- 172.17.1.101:52607       CLOSED:SYN_SENT
all tcp 172.17.1.101:52607 -> 209.30.19.243:80       SYN_SENT:CLOSED
all tcp 209.30.19.243:6146 <- 172.17.1.101:52603       CLOSED:SYN_SENT
all tcp 172.17.1.101:52603 -> 209.30.19.243:6146       SYN_SENT:CLOSED
all udp 204.16.153.246:38434 -> 206.13.28.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:39151 -> 206.13.31.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:18075 -> 206.13.28.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:45922 -> 206.13.31.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:18586 -> 206.13.28.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:4879 -> 206.13.31.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:20297 -> 206.13.28.12:53       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:5297 -> 206.13.31.12:53       SINGLE:NO_TRAFFIC
all tcp 78.146.201.228:9940 <- 172.17.1.101:52625       CLOSED:SYN_SENT
all tcp 172.17.1.101:52625 -> 78.146.201.228:9940       SYN_SENT:CLOSED
all tcp 74.125.19.17:80 <- 172.17.1.200:51016       CLOSED:SYN_SENT
all tcp 172.17.1.200:51016 -> 74.125.19.17:80       SYN_SENT:CLOSED
all tcp 69.180.221.160:443 <- 172.17.1.101:52617       CLOSED:SYN_SENT
all tcp 172.17.1.101:52617 -> 69.180.221.160:443       SYN_SENT:CLOSED
all carp 204.16.153.246 -> 224.0.0.18       SINGLE:NO_TRAFFIC
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.231:53738       SINGLE:MULTIPLE
all icmp 172.17.254.1 -> 224.0.0.2       0:0
all icmp 172.17.1.1 -> 224.0.0.2       0:0
all icmp 204.16.153.246 -> 224.0.0.2       0:0
all icmp 172.17.1.254 -> 224.0.0.2       0:0
all icmp 172.17.128.254 -> 224.0.0.2       0:0
all icmp 172.17.254.254 -> 224.0.0.2       0:0
all carp 172.17.1.254 -> 224.0.0.18       SINGLE:NO_TRAFFIC
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.249:33409       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.153:33572       MULTIPLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.148:35972       MULTIPLE:MULTIPLE
all icmp 69.55.233.110:22055 <- 172.17.1.168       0:0
all icmp 172.17.1.168:22055 -> 69.55.233.110       0:0
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.142:44460       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.142:44461       MULTIPLE:MULTIPLE
all tcp 74.125.19.17:80 <- 172.17.1.231:62935       CLOSED:SYN_SENT
all tcp 172.17.1.231:62935 -> 74.125.19.17:80       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 192.41.162.30:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 216.220.40.243:53       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 199.19.53.1:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 205.210.42.19:53       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 192.31.80.30:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 216.246.59.66:53       MULTIPLE:SINGLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.213:32865       MULTIPLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.249:33411       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.142:44462       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 209.200.177.4:53       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 192.43.172.30:53       MULTIPLE:SINGLE
all tcp 74.128.171.121:27931 <- 172.17.1.101:52626       CLOSED:SYN_SENT
all tcp 172.17.1.101:52626 -> 74.128.171.121:27931       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.249:33410       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.249:33412       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 192.5.6.32:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 192.26.92.30:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 192.41.162.31:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 192.5.6.30:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 205.234.220.146:53       MULTIPLE:SINGLE
all tcp 74.125.19.18:443 <- 172.17.1.52:3025       CLOSED:SYN_SENT
all tcp 172.17.1.52:3025 -> 74.125.19.18:443       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 66.199.228.130:53       MULTIPLE:SINGLE
all carp 172.17.254.254 -> 224.0.0.18       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 209.200.131.4:53       MULTIPLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.249:33413       MULTIPLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.142:44463       SINGLE:MULTIPLE
all tcp 72.249.21.48:443 <- 172.17.1.249:38261       CLOSED:SYN_SENT
all tcp 172.17.1.249:38261 -> 72.249.21.48:443       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.142:44464       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.142:44465       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.142:44466       SINGLE:MULTIPLE
all tcp 72.249.21.48:443 <- 172.17.1.142:56098       CLOSED:SYN_SENT
all tcp 172.17.1.142:56098 -> 72.249.21.48:443       SYN_SENT:CLOSED
all tcp 72.249.21.48:443 <- 172.17.1.142:56099       CLOSED:SYN_SENT
all tcp 172.17.1.142:56099 -> 72.249.21.48:443       SYN_SENT:CLOSED
all tcp 72.249.21.48:443 <- 172.17.1.153:59273       CLOSED:SYN_SENT
all tcp 172.17.1.153:59273 -> 72.249.21.48:443       SYN_SENT:CLOSED
all tcp 72.249.21.48:443 <- 172.17.1.148:39848       CLOSED:SYN_SENT
all tcp 172.17.1.148:39848 -> 72.249.21.48:443       SYN_SENT:CLOSED
all tcp 204.16.155.145:37 <- 172.17.1.249:50598       CLOSED:SYN_SENT
all tcp 172.17.1.249:50598 -> 204.16.155.145:37       SYN_SENT:CLOSED
all tcp 74.125.19.18:80 <- 172.17.1.243:58104       CLOSED:SYN_SENT
all tcp 172.17.1.243:58104 -> 74.125.19.18:80       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 209.200.151.4:53       MULTIPLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.152:40387       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.152:40392       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 192.33.14.30:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 216.246.59.82:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 199.19.57.1:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 64.22.224.83:53       MULTIPLE:SINGLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.148:35971       SINGLE:MULTIPLE
all tcp 72.249.21.48:443 <- 172.17.1.148:39849       CLOSED:SYN_SENT
all tcp 172.17.1.148:39849 -> 72.249.21.48:443       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 66.252.1.10:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 65.74.139.4:53       MULTIPLE:SINGLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.152:40389       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.152:40393       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 192.35.51.32:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 192.12.94.30:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 65.74.130.6:53       MULTIPLE:SINGLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.152:40390       SINGLE:MULTIPLE
all udp 204.16.153.246:17996 -> 65.74.169.199:53       MULTIPLE:MULTIPLE
all tcp 65.74.169.199:443 <- 172.17.1.152:34432       CLOSED:SYN_SENT
all tcp 172.17.1.152:34432 -> 65.74.169.199:443       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.156:47893       SINGLE:MULTIPLE
all udp 204.16.153.246:17996 -> 192.35.51.30:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 68.142.255.16:53       MULTIPLE:SINGLE
all icmp 69.55.233.109:27431 <- 172.17.1.168       0:0
all icmp 172.17.1.168:27431 -> 69.55.233.109       0:0
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.152:40394       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.152:40395       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 192.42.93.30:53       MULTIPLE:SINGLE
all tcp 74.125.19.83:443 <- 172.17.1.52:3026       CLOSED:SYN_SENT
all tcp 172.17.1.52:3026 -> 74.125.19.83:443       SYN_SENT:CLOSED
all tcp 69.55.233.227:22 <- 172.17.1.168:50537       CLOSED:SYN_SENT
all tcp 172.17.1.168:50537 -> 69.55.233.227:22       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 213.254.204.197:53       MULTIPLE:MULTIPLE
all udp 204.16.153.246:17996 -> 204.74.112.1:53       MULTIPLE:SINGLE
all tcp 204.16.155.145:37 <- 172.17.1.152:34435       CLOSED:SYN_SENT
all tcp 172.17.1.152:34435 -> 204.16.155.145:37       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 204.2.178.133:53       MULTIPLE:MULTIPLE
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.156:47895       SINGLE:MULTIPLE
all udp 204.16.153.246:17996 -> 195.219.3.169:53       SINGLE:NO_TRAFFIC
all udp 204.16.155.145:1194 <- 64.81.162.114:1194       NO_TRAFFIC:SINGLE
all udp 64.81.162.114:1194 -> 204.16.155.145:1194       SINGLE:NO_TRAFFIC
all tcp 69.55.233.227:8080 <- 172.17.1.168:56610       CLOSED:SYN_SENT
all tcp 172.17.1.168:56610 -> 69.55.233.227:8080       SYN_SENT:CLOSED
all udp 204.16.155.145:1194 <- 64.81.162.114:4178       NO_TRAFFIC:SINGLE
all udp 64.81.162.114:4178 -> 204.16.155.145:1194       SINGLE:NO_TRAFFIC
all tcp 74.125.19.19:80 <- 172.17.1.170:52291       CLOSED:SYN_SENT
all tcp 172.17.1.170:52291 -> 74.125.19.19:80       SYN_SENT:CLOSED
all udp 204.16.155.145:1194 <- 67.183.221.5:1194       NO_TRAFFIC:SINGLE
all udp 67.183.221.5:1194 -> 204.16.155.145:1194       SINGLE:NO_TRAFFIC
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.159:54534       SINGLE:MULTIPLE
all udp 204.16.155.145:1194 <- 64.81.64.170:47712       NO_TRAFFIC:SINGLE
all udp 64.81.64.170:47712 -> 204.16.155.145:1194       SINGLE:NO_TRAFFIC
all tcp 74.125.19.17:80 <- 172.17.1.231:62936       CLOSED:SYN_SENT
all tcp 172.17.1.231:62936 -> 74.125.19.17:80       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.152:40391       SINGLE:MULTIPLE
all tcp 65.74.169.199:443 <- 172.17.1.152:34434       CLOSED:SYN_SENT
all tcp 172.17.1.152:34434 -> 65.74.169.199:443       SYN_SENT:CLOSED
all tcp 79.1.149.43:57366 <- 172.17.1.101:52627       CLOSED:SYN_SENT
all tcp 172.17.1.101:52627 -> 79.1.149.43:57366       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.156:47896       MULTIPLE:MULTIPLE
all udp 204.16.155.145:1194 <- 70.167.214.244:61980       NO_TRAFFIC:SINGLE
all udp 70.167.214.244:61980 -> 204.16.155.145:1194       SINGLE:NO_TRAFFIC
all udp 204.16.153.246:17996 -> 220.73.220.4:53       MULTIPLE:MULTIPLE
all tcp 172.17.1.145:22 <- 172.17.1.97:63864       CLOSED:SYN_SENT
all tcp 172.17.1.97:63864 -> 172.17.1.145:22       SYN_SENT:CLOSED
all tcp 129.119.75.222:49843 <- 172.17.1.101:52628       CLOSED:SYN_SENT
all tcp 172.17.1.101:52628 -> 129.119.75.222:49843       SYN_SENT:CLOSED
all tcp 209.73.168.74:443 <- 172.17.1.156:46399       CLOSED:SYN_SENT
all tcp 172.17.1.156:46399 -> 209.73.168.74:443       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.156:47894       SINGLE:MULTIPLE
all tcp 74.125.19.19:80 <- 172.17.1.170:52292       CLOSED:SYN_SENT
all tcp 172.17.1.170:52292 -> 74.125.19.19:80       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 199.19.54.1:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 204.152.184.126:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 199.19.56.1:53       MULTIPLE:SINGLE
all tcp 71.77.11.132:25902 <- 172.17.1.101:52629       CLOSED:SYN_SENT
all tcp 172.17.1.101:52629 -> 71.77.11.132:25902       SYN_SENT:CLOSED
all tcp 68.40.28.4:2505 <- 172.17.1.101:52630       CLOSED:SYN_SENT
all tcp 172.17.1.101:52630 -> 68.40.28.4:2505       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 192.54.112.30:53       MULTIPLE:SINGLE
all tcp 66.199.241.130:22 <- 172.17.1.168:54862       CLOSED:SYN_SENT
all tcp 172.17.1.168:54862 -> 66.199.241.130:22       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 67.19.103.171:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 63.251.223.180:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 63.251.223.184:53       MULTIPLE:SINGLE
all udp 204.16.153.246:41397 -> 209.104.4.227:123       MULTIPLE:MULTIPLE
all udp 204.16.153.246:46790 -> 74.54.27.139:123       MULTIPLE:MULTIPLE
all udp 204.16.153.246:11773 -> 64.202.112.75:123       MULTIPLE:MULTIPLE
all udp 204.16.153.246:14047 -> 64.72.116.52:123       MULTIPLE:MULTIPLE
all udp 204.16.153.246:33979 -> 64.25.87.54:123       MULTIPLE:MULTIPLE
all udp 255.255.255.255:67 <- 0.0.0.0:68       NO_TRAFFIC:SINGLE
all icmp 172.17.1.254:65051 -> 172.17.1.31       0:0
all tcp 74.125.19.19:80 <- 172.17.1.170:52293       CLOSED:SYN_SENT
all tcp 172.17.1.170:52293 -> 74.125.19.19:80       SYN_SENT:CLOSED
all tcp 66.41.77.10:3412 <- 172.17.1.101:52631       CLOSED:SYN_SENT
all tcp 172.17.1.101:52631 -> 66.41.77.10:3412       SYN_SENT:CLOSED
all tcp 74.125.19.18:80 <- 172.17.1.252:63663       CLOSED:SYN_SENT
all tcp 172.17.1.252:63663 -> 74.125.19.18:80       SYN_SENT:CLOSED
all tcp 74.125.19.18:443 <- 172.17.1.52:3027       CLOSED:SYN_SENT
all tcp 172.17.1.52:3027 -> 74.125.19.18:443       SYN_SENT:CLOSED
all tcp 128.84.2.34:4962 <- 172.17.1.101:52632       CLOSED:SYN_SENT
all tcp 172.17.1.101:52632 -> 128.84.2.34:4962       SYN_SENT:CLOSED
all tcp 151.202.59.176:12213 <- 172.17.1.101:52633       CLOSED:SYN_SENT
all tcp 172.17.1.101:52633 -> 151.202.59.176:12213       SYN_SENT:CLOSED
all tcp 74.125.19.19:80 <- 172.17.1.252:63665       CLOSED:SYN_SENT
all tcp 172.17.1.252:63665 -> 74.125.19.19:80       SYN_SENT:CLOSED
all tcp 69.55.233.227:22 <- 172.17.1.168:50549       CLOSED:SYN_SENT
all tcp 172.17.1.168:50549 -> 69.55.233.227:22       SYN_SENT:CLOSED
all tcp 69.55.231.213:22 <- 172.17.1.168:53067       CLOSED:SYN_SENT
all tcp 172.17.1.168:53067 -> 69.55.231.213:22       SYN_SENT:CLOSED
all icmp 172.17.1.254:65051 -> 172.17.1.30       0:0
all tcp 204.16.155.145:37 <- 172.17.1.148:49297       CLOSED:SYN_SENT
all tcp 172.17.1.148:49297 -> 204.16.155.145:37       SYN_SENT:CLOSED
all icmp 172.17.1.254:65051 -> 172.17.1.32       0:0
all tcp 72.249.21.48:22 <- 172.17.1.168:40962       CLOSED:SYN_SENT
all tcp 172.17.1.168:40962 -> 72.249.21.48:22       SYN_SENT:CLOSED
all tcp 69.55.231.198:22 <- 172.17.1.168:37527       CLOSED:SYN_SENT
all tcp 172.17.1.168:37527 -> 69.55.231.198:22       SYN_SENT:CLOSED
all tcp 74.125.19.19:80 <- 172.17.1.170:52294       CLOSED:SYN_SENT
all tcp 172.17.1.170:52294 -> 74.125.19.19:80       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.243:52105       SINGLE:MULTIPLE
all tcp 74.125.19.19:80 <- 172.17.1.170:52295       CLOSED:SYN_SENT
all tcp 172.17.1.170:52295 -> 74.125.19.19:80       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 204.16.155.145:53 <- 68.87.76.181:32925       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 204.16.155.145:53 <- 68.87.76.179:33000       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 204.16.155.145:53 <- 68.87.76.180:32921       SINGLE:MULTIPLE
all udp 127.0.0.1:53 <- 204.16.155.145:53 <- 68.87.78.133:34020       SINGLE:MULTIPLE
all udp 239.203.13.64:2863 <- 172.17.1.229:54965       NO_TRAFFIC:SINGLE
all tcp 74.125.19.17:80 <- 172.17.1.160:51285       CLOSED:SYN_SENT
all tcp 172.17.1.160:51285 -> 74.125.19.17:80       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.170:52777       SINGLE:MULTIPLE
all udp 204.16.153.246:17996 -> 192.48.79.30:53       MULTIPLE:SINGLE
all tcp 72.184.64.142:27548 <- 172.17.1.101:52634       CLOSED:SYN_SENT
all tcp 172.17.1.101:52634 -> 72.184.64.142:27548       SYN_SENT:CLOSED
all udp 204.16.153.246:17996 -> 216.239.36.10:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 216.239.34.10:53       MULTIPLE:SINGLE
all udp 204.16.153.246:17996 -> 209.85.137.9:53       MULTIPLE:SINGLE
all tcp 74.125.19.99:80 <- 172.17.1.170:52296       CLOSED:SYN_SENT
all tcp 172.17.1.170:52296 -> 74.125.19.99:80       SYN_SENT:CLOSED
all tcp 69.55.233.230:22 <- 172.17.1.168:52294       CLOSED:SYN_SENT
all tcp 172.17.1.168:52294 -> 69.55.233.230:22       SYN_SENT:CLOSED
all tcp 66.57.93.243:46892 <- 172.17.1.101:52635       CLOSED:SYN_SENT
all tcp 172.17.1.101:52635 -> 66.57.93.243:46892       SYN_SENT:CLOSED
all tcp 24.46.191.12:38868 <- 172.17.1.101:52636       CLOSED:SYN_SENT
all tcp 172.17.1.101:52636 -> 24.46.191.12:38868       SYN_SENT:CLOSED
all tcp 172.17.1.254:22 <- 172.17.1.97:63865       ESTABLISHED:ESTABLISHED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.97:52858       SINGLE:MULTIPLE
all tcp 74.125.19.17:80 <- 172.17.1.200:51019       CLOSED:SYN_SENT
all tcp 172.17.1.200:51019 -> 74.125.19.17:80       SYN_SENT:CLOSED
all tcp 72.184.64.142:443 <- 172.17.1.101:52637       CLOSED:SYN_SENT
all tcp 172.17.1.101:52637 -> 72.184.64.142:443       SYN_SENT:CLOSED
all udp 127.0.0.1:53 <- 172.17.1.1:53 <- 172.17.1.97:52857       SINGLE:MULTIPLE
all udp 204.16.153.246:17996 -> 216.239.32.10:53       MULTIPLE:SINGLE
all icmp 64.233.167.99:33797 <- 172.17.1.97       0:0
all icmp 172.17.1.97:33797 -> 64.233.167.99       0:0
all tcp 72.184.64.142:80 <- 172.17.1.101:52638       CLOSED:SYN_SENT
all tcp 172.17.1.101:52638 -> 72.184.64.142:80       SYN_SENT:CLOSED
all tcp 76.167.138.48:38769 <- 172.17.1.101:52639       CLOSED:SYN_SENT
all tcp 172.17.1.101:52639 -> 76.167.138.48:38769       SYN_SENT:CLOSED
all tcp 79.125.191.30:12491 <- 172.17.1.101:52640       CLOSED:SYN_SENT
all tcp 172.17.1.101:52640 -> 79.125.191.30:12491       SYN_SENT:CLOSED
all tcp 74.125.19.17:80 <- 172.17.1.231:62938       CLOSED:SYN_SENT
all tcp 172.17.1.231:62938 -> 74.125.19.17:80       SYN_SENT:CLOSED
all tcp 76.167.138.48:443 <- 172.17.1.101:52641       CLOSED:SYN_SENT
all tcp 172.17.1.101:52641 -> 76.167.138.48:443       SYN_SENT:CLOSED
all tcp 69.55.231.213:22 <- 172.17.1.168:53071       CLOSED:SYN_SENT
all tcp 172.17.1.168:53071 -> 69.55.231.213:22       SYN_SENT:CLOSED
all tcp 74.125.19.17:80 <- 172.17.1.231:62939       CLOSED:SYN_SENT
all tcp 172.17.1.231:62939 -> 74.125.19.17:80       SYN_SENT:CLOSED
all tcp 121.95.84.33:10454 <- 172.17.1.101:52642       CLOSED:SYN_SENT
all tcp 172.17.1.101:52642 -> 121.95.84.33:10454       SYN_SENT:CLOSED
all tcp 129.2.225.198:22891 <- 172.17.1.101:52643       CLOSED:SYN_SENT
all tcp 172.17.1.101:52643 -> 129.2.225.198:22891       SYN_SENT:CLOSED
all tcp 74.125.19.18:80 <- 172.17.1.243:58108       CLOSED:SYN_SENT
all tcp 172.17.1.243:58108 -> 74.125.19.18:80       SYN_SENT:CLOSED
all tcp 70.114.1.49:3482 <- 172.17.1.101:52644       CLOSED:SYN_SENT
all tcp 172.17.1.101:52644 -> 70.114.1.49:3482       SYN_SENT:CLOSED
all tcp 76.167.138.48:80 <- 172.17.1.101:52645       CLOSED:SYN_SENT
all tcp 172.17.1.101:52645 -> 76.167.138.48:80       SYN_SENT:CLOSED
all icmp 69.55.233.227:47143 <- 172.17.1.168       0:0
all icmp 172.17.1.168:47143 -> 69.55.233.227       0:0
all tcp 24.127.71.24:22064 <- 172.17.1.101:52646       CLOSED:SYN_SENT
all tcp 172.17.1.101:52646 -> 24.127.71.24:22064       SYN_SENT:CLOSED
all tcp 169.229.149.100:29662 <- 172.17.1.101:52647       CLOSED:SYN_SENT
all tcp 172.17.1.101:52647 -> 169.229.149.100:29662       SYN_SENT:CLOSED
all tcp 69.55.231.198:22 <- 172.17.1.168:37530       CLOSED:SYN_SENT
all tcp 172.17.1.168:37530 -> 69.55.231.198:22       SYN_SENT:CLOSED
all tcp 69.55.233.227:22 <- 172.17.1.168:50557       CLOSED:SYN_SENT
all tcp 172.17.1.168:50557 -> 69.55.233.227:22       SYN_SENT:CLOSED
all tcp 74.125.19.17:443 <- 172.17.1.52:3028       CLOSED:SYN_SENT
all tcp 172.17.1.52:3028 -> 74.125.19.17:443       SYN_SENT:CLOSED
all tcp 74.125.19.83:80 <- 172.17.1.160:51288       CLOSED:SYN_SENT
all tcp 172.17.1.160:51288 -> 74.125.19.83:80       SYN_SENT:CLOSED
all udp 224.0.0.251:5353 <- 172.17.1.105:59067       NO_TRAFFIC:SINGLE
all udp 224.0.0.251:5353 <- 172.17.1.105:5353       NO_TRAFFIC:SINGLE
all tcp 24.127.71.24:443 <- 172.17.1.101:52648       CLOSED:SYN_SENT
all tcp 172.17.1.101:52648 -> 24.127.71.24:443       SYN_SENT:CLOSED
all icmp 69.55.233.230:50215 <- 172.17.1.168       0:0
all icmp 172.17.1.168:50215 -> 69.55.233.230       0:0

INFO:
Status: Enabled for 0 days 00:00:27           Debug: Urgent

State Table                          Total             Rate
  current entries                      373               
  searches                            6307          233.6/s
  inserts                              374           13.9/s
  removals                               1            0.0/s
Counters
  match                                503           18.6/s
  bad-offset                             0            0.0/s
  fragment                               0            0.0/s
  short                                  0            0.0/s
  normalize                              0            0.0/s
  memory                                 0            0.0/s
  bad-timestamp                          0            0.0/s
  congestion                             0            0.0/s
  ip-option                              0            0.0/s
  proto-cksum                            0            0.0/s
  state-mismatch                         0            0.0/s
  state-insert                           0            0.0/s
  state-limit                            0            0.0/s
  src-limit                              0            0.0/s
  synproxy                               0            0.0/s

LABEL COUNTERS:
in 216 82 6888 58 4872 24 2016
ssh-in 212 0 0 0 0 0 0
openvpn 190 0 0 0 0 0 0
openvpn 94 454 44342 438 43446 16 896

TIMEOUTS:
tcp.first                   120s
tcp.opening                  30s
tcp.established           86400s
tcp.closing                 900s
tcp.finwait                  45s
tcp.closed                   90s
tcp.tsdiff                   30s
udp.first                    60s
udp.single                   30s
udp.multiple                 60s
icmp.first                   20s
icmp.error                   10s
other.first                  60s
other.single                 30s
other.multiple               60s
frag                         30s
interval                     10s
adaptive.start             6000 states
adaptive.end              12000 states
src.track                     0s

LIMITS:
states        hard limit    10000
src-nodes     hard limit    10000
frags         hard limit     5000
tables        hard limit     1000
table-entries hard limit   200000

TABLES:
bruteforce

OS FINGERPRINTS:
696 fingerprints loaded