b0e3f8e9ad
ConntrackTable gains stats() method returning per-protocol breakdown: tcp_entries: N (est=N syn=N syn_recv=N fin=N tw=N close=N) udp_entries: N icmp_entries: N over_limit: N total_entries: N TCP states counted: None, SynSent, SynRecv, Established, FinWait, TimeWait, Close. Mirrors Linux /proc/net/stat/nf_conntrack. Exposed via three channels: - /scheme/netfilter/conntrack/stats (new dedicated node) - /scheme/netfilter/stats (existing, now includes per-state) - /scheme/netcfg/summary (includes conntrack stats block) All 31 tests pass.