vyos bug - a tcp flow is working, and it will also working at the step you change the port or other

早先同事就提醒过软路由这个东西不能轻易使用，今天就遇到了一次。

当前有流量大概1MBps， 但是使用 monitor interface 去查看的时候，居然显示没有，这是怎么回事儿呢？

• monitor interface 查看没有流量，可是流量明明在传着
• shutdown 接口 。。 没效果
• tcpdump 能看到流量了

重启以后发现，一切正常。

后来查看，希望可以通过clear掉nat的conntrack可能可以解决

show conntrack table ipv4

I post a question on the bbs

and some body replied with the

When a NAT rule has some translation active and you delete this rule, VyOs doesn't delete the existing conntrack entry.

So the existing flow will continue to run. This has caused some headaches to me since it's also true when you change a rule.

You can delete the conntack entry using `sudo conntrack -D -d <destination ip>` 
The -D flag is for delete and -d for the destination IP

See conntack manual (sudo man conntrack) for more option