I noticed the following today on our router:
user@router:~$ cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count
28141
However:
user@router:~$ sudo conntrack -L > /dev/null
conntrack v1.2.1 (conntrack-tools): 4652 flow entries have been shown.
user@router:~$ sudo conntrack -L expect > /dev/null
conntrack v1.2.1 (conntrack-tools): 1 expectations have been shown.
My understanding is that ip_conntrack_count
shows the number of entries of the conntrack table. What am I missing?