---
badfuncs:
  ignore:
    - /usr/sbin/conntrack
    - /usr/sbin/conntrackd