check stderr as conntrack pushes to stderr on each pass
update the plugin.conf