Could you add "delay" and "cracked" to the legend? How they work e.g. if they need your iptables-rules