Connection tracking synchronization 995 Protocols for which local conntrack entries will be synced tcp udp icmp icmp6 sctp dccp tcp Sync Transmission Control Protocol entries udp Sync User Datagram Protocol entries icmp Sync Internet Control Message Protocol entries icmp6 Sync IPv6 Internet Control Message Protocol entries sctp Sync Stream Control Transmission Protocol entries dccp Sync Datagram Congestion Control Protocol entries ^(tcp|udp|icmp|icmp6|sctp|dccp)$ Allowed protocols: tcp udp icmp or sctp Directly injects the flow-states into the in-kernel Connection Tracking System of the backup firewall. Queue size for local conntrack events u32 Queue size in MB 8 Protocol for which expect entries need to be synchronized all ftp sip h323 nfs sqlnet ^(all|ftp|sip|h323|nfs|sqlnet)$ Invalid protocol Failover mechanism to use for conntrack-sync VRRP as failover-mechanism to use for conntrack-sync VRRP sync group high-availability vrrp sync-group IP addresses for which local conntrack entries will not be synced ipv4 IPv4 address to ignore ipv4net IPv4 prefix to ignore ipv6 IPv6 address to ignore ipv6net IPv6 prefix to ignore Interface to use for syncing conntrack entries IP address of the peer to send the UDP conntrack info too. This disable multicast. ipv4 IP address to listen for incoming connections #include Multicast group to use for syncing conntrack entries 225.0.0.50 Queue size for syncing conntrack entries u32 Queue size in MB 1