diff --git a/el/rtpengine-recording.init b/el/rtpengine-recording.init
new file mode 100644
index 000000000..75597b800
--- /dev/null
+++ b/el/rtpengine-recording.init
@@ -0,0 +1,91 @@
+#!/bin/bash
+#
+# rtpengine-recording		Startup script for NGCP rtpengine-recording
+#
+# chkconfig: 345 84 16
+# description: NGCP rtpengine-recording
+#
+# processname: rtpengine-recording
+# config: /etc/sysconfig/rtpengine-recording
+# pidfile: /var/run/rtpengine-recording.pid
+#
+### BEGIN INIT INFO
+# Provides: rtpengine
+# Required-Start: $local_fs $network
+# Short-Description: NGCP rtpengine-recording
+# Description: NGCP rtpengine-recording 
+### END INIT INFO
+
+# Source function library.
+. /etc/rc.d/init.d/functions
+
+if [ -f /etc/sysconfig/rtpengine-recording ]
+then
+        . /etc/sysconfig/rtpengine-recording
+else
+	echo "Error: /etc/sysconfig/rtpengine-recording not present"
+	exit -1
+fi
+
+prog=rtpengine-recording
+runfile=/usr/sbin/${prog}
+pidfile=${PIDFILE-/var/run/rtpengine-recording.pid}
+lockfile=${LOCKFILE-/var/lock/subsys/rtpengine-recording}
+cachefile=/var/lib/ngcp-rtpengine/$prog.cfg
+RETVAL=0
+OPTS=""
+
+[ -z "$CONFIG_FILE" ] || OPTS+=" --config-file=$CONFIG_FILE"
+[ -z "$PIDFILE" ] || OPTS+=" --pidfile=$PIDFILE"
+
+start() {
+        echo -n $"Starting $prog: "
+	if [[ -n "$RE_USER" ]]
+	then
+		# shellcheck disable=SC2086
+		daemon --user "$RE_USER" --pidfile="${pidfile}" "$runfile" $OPTS
+	else
+		# shellcheck disable=SC2086
+		daemon --pidfile="${pidfile}" "$runfile" $OPTS
+	fi
+        RETVAL=$?
+        echo
+        [ $RETVAL = 0 ] && touch "${lockfile}"
+        return $RETVAL
+}
+
+stop() {
+	echo -n $"Stopping $prog: "
+	killproc -p "${pidfile}" "$runfile"
+	RETVAL=$?
+	[ $RETVAL = 0 ] && rm -f "${lockfile}" "${pidfile}"
+}
+
+# See how we were called.
+case "$1" in
+  start)
+	start
+	;;
+  stop)
+	stop
+	;;
+  status)
+        status -p "${pidfile}" "$runfile"
+	RETVAL=$?
+	;;
+  restart)
+	stop
+	start
+	;;
+  condrestart|try-restart)
+	if status -p "${pidfile}" "$runfile" >&/dev/null; then
+		stop
+		start
+	fi
+	;;
+  *)
+	echo $"Usage: $prog {start|stop|restart|condrestart|try-restart|status}"
+	RETVAL=2
+esac
+
+exit $RETVAL
diff --git a/el/rtpengine-recording.sysconfig b/el/rtpengine-recording.sysconfig
new file mode 100644
index 000000000..7be863987
--- /dev/null
+++ b/el/rtpengine-recording.sysconfig
@@ -0,0 +1,8 @@
+# For more information on configuring rtpengine see
+# http://github.com/sipwise/rtpengine
+#
+CONFIG_FILE=/etc/rtpengine/rtpengine-recording.conf
+PIDFILE=/var/run/ngcp-rtpengine-recording-daemon.pid
+#SET_USER=root
+#SET_GROUP=root	# GROUP only needs to be set if USER is not set or if the user isn't in the group
+
diff --git a/el/rtpengine.init b/el/rtpengine.init
index 07053c910..c60828277 100644
--- a/el/rtpengine.init
+++ b/el/rtpengine.init
@@ -32,184 +32,109 @@ prog=rtpengine
 pidfile=${PIDFILE-/var/run/rtpengine.pid}
 lockfile=${LOCKFILE-/var/lock/subsys/rtpengine}
 cachefile=/var/lib/ngcp-rtpengine/rtpengine.cfg
+PIDFILE=${pidfile}
 RETVAL=0
 
-OPTS="--pidfile $pidfile"
-MODULE=0
-
 build_opts() {
+        # kernel table
 	shopt -s nocasematch
 	RPMS=$(rpm -qa | grep rtpengine-kernel)
-	if [[ "$KERNEL" == "yes" && -n "$TABLE" && -n "$RPMS" ]]
-	then
+	if [[ "$KERNEL" == "yes" && -n "$TABLE" && -n "$RPMS" ]];then
 		MODULE=1
-		OPTS+=" --table=$TABLE"
+		OPTS=" --table=$TABLE"
 	else
 		MODULE=0
-		OPTS+=" --table=-1"
-	fi
-
-	if [[ "$FALLBACK" != "yes" ]]
-	then
-		OPTS+=" --no-fallback"
-	fi
-	shopt -u nocasematch
-
-        if [[ -n "$RTP_IP" ]]
-        then
-                for IP in "${RTP_IP[@]}"
-                do
-                        OPTS+=" --interface=$IP"
-                done
-        fi
-
-	if [[ -n "$LISTEN_TCP" ]]
-	then
-		OPTS+=" --listen-tcp=$LISTEN_TCP"
-	fi
-
-	if [[ -n "$LISTEN_UDP" ]]
-	then
-		OPTS+=" --listen-udp=$LISTEN_UDP"
-	fi
-
-	if [[ -n "$LISTEN_NG" ]]
-	then
-		OPTS+=" --listen-ng=$LISTEN_NG"
-	fi
-
-	if [[ -n "$LISTEN_CLI" ]]
-	then
-	    OPTS+=" --listen-cli=$LISTEN_CLI"
-	fi
-
-	if [[ -n "$TOS" ]]
-	then
-		OPTS+=" --tos=$TOS"
-	fi
-
-	if [[ -n "$TIMEOUT" ]]
-	then
-		OPTS+=" --timeout=$TIMEOUT"
-	fi
-
-	if [[ -n "$SILENT_TIMEOUT" ]]
-	then
-		OPTS+=" --silent-timeout=$SILENT_TIMEOUT"
-	fi
-
-	if [[ -n "$PORT_MIN" ]]
-	then
-		OPTS+=" --port-min=$PORT_MIN"
-	fi
-
-	if [[ -n "$PORT_MAX" ]]
-	then
-		OPTS+=" --port-max=$PORT_MAX"
-	fi
-
-	if [ -n "$REDIS" -a -n "$REDIS_DB" ]
-	then
-		OPTS+=" --redis=$REDIS/$REDIS_DB"
-	fi
-
-	if [[ -n "$B2B_URL" ]]
-	then
-		OPTS+=" --b2b-url=$B2B_URL"
-	fi
-
-	if [[ -n "$LOG_LEVEL" ]]
-	then
-		OPTS+=" --log-level=$LOG_LEVEL"
-	fi
-
-	if [[ -n "$LOG_FACILITY" ]]
-        then
-                OPTS+=" --log-facility=$LOG_FACILITY"
-        fi
-
-	if [[ -n "$NUM_THREADS" ]]
-        then
-                OPTS+=" --num-threads=$NUM_THREADS"
-        fi
-
-        if [[ -n "$DELETE_DELAY" ]]
-         then
-                 OPTS+=" --delete-delay=$DELETE_DELAY"
-        fi
-
-        if [[ -n "$GRAPHITE" ]]
-         then
-                 OPTS+=" --graphite=$GRAPHITE"
-        fi
-
-        if [[ -n "$GRAPHITE_INTERVAL" ]]
-         then
-                 OPTS+=" --graphite-interval=$GRAPHITE_INTERVAL"
-        fi
-
-	if [[ -n "$GRAPHITE_PREFIX" ]]
-	then
-		OPTS+=" --graphite-prefix=$GRAPHITE_PREFIX"
+		OPTS=" --table=-1"
+	fi
+
+	[[ "$FALLBACK" != "yes" ]] && OPTS+=" --no-fallback"
+        shopt -u nocasematch
+
+	# interfaces
+	if [[ -n "$RTP_IP" ]];then
+		for IP in "${RTP_IP[@]}";do
+			OPTS+=" --interface=$IP"
+		done
+	fi
+
+	# options
+        [[ "$FORK" == "no" ]] && OPTS+=" --foreground"
+        [[ "$LOG_STDERR" == "yes" ]] && OPTS+=" --log-stderr"
+	[ -z "$CONFIG_FILE" ] || OPTS+=" --config-file=$CONFIG_FILE"
+	[ -z "$CONFIG_SECTION" ] || OPTS+=" --config-section=$CONFIG_SECTION"
+	[ -z "$ADDRESS" ] || OPTS+=" --interface=$ADDRESS"
+	[ -z "$ADV_ADDRESS" ] || OPTS+="!$ADV_ADDRESS"
+	[ -z "$ADDRESS_IPV6" ] || OPTS+=" --interface=$ADDRESS_IPV6"
+	[ -z "$ADV_ADDRESS_IPV6" ] || OPTS+="!$ADV_ADDRESS_IPV6"
+	[ -z "$LISTEN_TCP" ] || OPTS+=" --listen-tcp=$LISTEN_TCP"
+	[ -z "$LISTEN_UDP" ] || OPTS+=" --listen-udp=$LISTEN_UDP"
+	[ -z "$LISTEN_NG" ] || OPTS+=" --listen-ng=$LISTEN_NG"
+	[ -z "$LISTEN_CLI" ] || OPTS+=" --listen-cli=$LISTEN_CLI"
+	[ -z "$TIMEOUT" ] || OPTS+=" --timeout=$TIMEOUT"
+	[ -z "$SILENT_TIMEOUT" ] || OPTS+=" --silent-timeout=$SILENT_TIMEOUT"
+	[ -z "$FINAL_TIMEOUT" ] || OPTS+=" --final-timeout=$FINAL_TIMEOUT"
+	[ -z "$PIDFILE" ] || OPTS+=" --pidfile=$PIDFILE"
+	[ -z "$TOS" ] || OPTS+=" --tos=$TOS"
+	[ -z "$PORT_MIN" ] || OPTS+=" --port-min=$PORT_MIN"
+	[ -z "$PORT_MAX" ] || OPTS+=" --port-max=$PORT_MAX"
+	[ -z "$REDIS" ] || [ -z "$REDIS_DB" ] || OPTS+=" --redis=$REDIS/$REDIS_DB"
+	[ -z "$REDIS_AUTH_PW" ] || export RTPENGINE_REDIS_AUTH_PW="$REDIS_AUTH_PW"
+	[ -z "$REDIS_WRITE" ] || [ -z "$REDIS_WRITE_DB" ] || OPTS+=" --redis-write=$REDIS_WRITE/$REDIS_WRITE_DB"
+	[ -z "$REDIS_WRITE_AUTH_PW" ] || export RTPENGINE_REDIS_WRITE_AUTH_PW="$REDIS_WRITE_AUTH_PW"
+	[ -z "$REDIS_NUM_THREADS" ] || OPTS+=" --redis-num-threads=$REDIS_NUM_THREADS"
+	[ -z "$REDIS_EXPIRES" ] || OPTS+=" --redis-expires=$REDIS_EXPIRES"
+	[ -z "$REDIS_MULTIKEY" ] || OPTS+=" --redis-multikey=$REDIS_MULTIKEY"
+	[ -z "$NO_REDIS_REQUIRED" ] || ( [ "$NO_REDIS_REQUIRED" != "1" ] && [ "$NO_REDIS_REQUIRED" != "yes" ] ) || OPTS+=" --no-redis-required"
+	[ -z "$B2B_URL" ] || OPTS+=" --b2b-url=$B2B_URL"
+	[ -z "$LOG_LEVEL" ] || OPTS+=" --log-level=$LOG_LEVEL"
+	[ -z "$LOG_FACILITY" ] || OPTS+=" --log-facility=$LOG_FACILITY"
+	[ -z "$LOG_FACILITY_CDR" ] || OPTS+=" --log-facility-cdr=$LOG_FACILITY_CDR"
+	[ -z "$LOG_FACILITY_RTCP" ] || OPTS+=" --log-facility-rtcp=$LOG_FACILITY_RTCP"
+	[ -z "$NUM_THREADS" ] || OPTS+=" --num-threads=$NUM_THREADS"
+	[ -z "$DELETE_DELAY" ] || OPTS+=" --delete-delay=$DELETE_DELAY"
+	[ -z "$GRAPHITE" ] || OPTS+=" --graphite=$GRAPHITE"
+	[ -z "$GRAPHITE_INTERVAL" ] || OPTS+=" --graphite-interval=$GRAPHITE_INTERVAL"
+	[ -z "$GRAPHITE_PREFIX" ] || OPTS+=" --graphite-prefix=$GRAPHITE_PREFIX"
+	[ -z "$MAX_SESSIONS" ] || OPTS+=" --max-sessions=$MAX_SESSIONS"
+	[ -z "$HOMER" ] || OPTS+=" --homer=$HOMER"
+	[ -z "$HOMER_PROTOCOL" ] || OPTS+=" --homer-protocol=$HOMER_PROTOCOL"
+	[ -z "$HOMER_ID" ] || OPTS+=" --homer-id=$HOMER_ID"
+	[ -z "$RECORDING_METHOD" ] || OPTS+=" --recording-method=$RECORDING_METHOD"
+	[ -z "$RECORDING_FORMAT" ] || OPTS+=" --recording-format=$RECORDING_FORMAT"
+	[ -z "$DTLS_PASSIVE" ] || ( [ "$DTLS_PASSIVE" != "yes" ] && [ "$DTLS_PASSIVE" != "1" ] ) || OPTS+=" --dtls-passive"
+
+	# recording dir
+	if [ ! -z "$RECORDING_DIR" ];then
+		OPTS+=" --recording-dir=$RECORDING_DIR"
+		if [ ! -d "$RECORDING_DIR" ]; then
+			mkdir "$RECORDING_DIR" 2>/dev/null
+			chmod 700 "$RECORDING_DIR" 2>/dev/null
+		fi
 	fi
 
-	if [[ -n "$LOG_FACILITY_CDR" ]]
-        then
-                OPTS+=" --log-facility-cdr=$LOG_FACILITY_CDR"
-        fi
-
-	if [[ -n "$LOG_FACILITY_RTCP" ]]
-        then
-                OPTS+=" --log-facility-rtcp=$LOG_FACILITY_RTCP"
-        fi
-
-	if [[ -n "$MAX_SESSIONS" ]]
-        then
-                OPTS+=" --max-sessions=$MAX_SESSIONS"
-        fi
-
-	if [[ -n "$HOMER_SERVER" ]]
-        then
-                OPTS+=" --homer=$HOMER_SERVER"
-        fi
-
-	if [[ -n "$HOMER_PROTO" ]]
-        then
-                OPTS+=" --homer-protocol=$HOMER_PROTO"
-        fi
-
-	if [[ -n "$HOMER_CAPTURE_ID" ]]
-        then
-                OPTS+=" --homer-id=$HOMER_CAPTURE_ID"
-        fi
 }
 
 start() {
 	build_opts
-	if [[ $MODULE == 1 ]]
-	then
+	if [[ $MODULE == 1 ]];then
 		echo "Loading module for in-kernel packet forwarding"
 		rmmod xt_RTPENGINE 2> /dev/null
-		if [[ -n "$RE_USER" ]]
-		then
-			if [[ -n "$RE_GROUP" ]]
-			then
-				proc_gid="$(grep "^$RE_GROUP:" /etc/group | cut -f3 -d:)"
+		if [[ -n "$SET_USER" ]];then
+			if [[ -n "$SET_GROUP" ]];then
+				proc_gid="$(grep "^$SET_GROUP:" /etc/group | cut -f3 -d:)"
 			else
-				proc_gid="$(id "$RE_USER" -g)"
+				proc_gid="$(id "$SET_USER" -g)"
 			fi
-			modprobe xt_RTPENGINE proc_uid="$(id "$RE_USER" -u)" proc_gid="$proc_gid"
+			modprobe xt_RTPENGINE proc_uid="$(id "$SET_USER" -u)" proc_gid="$proc_gid"
 		else
 			modprobe xt_RTPENGINE
 		fi
 		firewall-cmd --state 2>/dev/null
-		if [[ $? == 0 ]]
-		then
+		if [[ $? == 0 ]];then
 			# Using firewalld
 			# Need to check if the INPUT_prefilter chain is present (permanently)
 			firewall-cmd --permanent --direct --query-chain ipv4 filter INPUT_prefilter > /dev/null
-			if [[ $? != 0 ]]
-			then
+			if [[ $? != 0 ]];then
 				firewall-cmd --permanent --direct --add-chain ipv4 filter INPUT_prefilter
 				firewall-cmd --permanent --direct --passthrough ipv4 -t filter -I INPUT -j INPUT_prefilter
 				firewall-cmd --reload
@@ -221,11 +146,12 @@ start() {
 			firewall-cmd --direct --add-rule ipv6 filter rtpengine 0 -p udp -j RTPENGINE --id "$TABLE"
   			firewall-cmd --reload
 		else
-			iptables -N rtpengine
-			# We insert the rtpengine rule at the top of the input chain
-			iptables -t filter -I INPUT -j rtpengine
-			iptables -I rtpengine -p udp -j RTPENGINE --id "$TABLE"
-			ip6tables -I rtpengine -p udp -j RTPENGINE --id "$TABLE"
+			for fw in iptables ip6tables;do
+				$fw -N rtpengine
+				# We insert the rtpengine rule at the top of the input chain
+				$fw -t filter -I INPUT -j rtpengine
+				$fw -I rtpengine -p udp -j RTPENGINE --id "$TABLE"
+			done
 		fi
 
 		cat <<EOF > "$cachefile"
@@ -233,10 +159,9 @@ CUR_TABLE=$TABLE
 EOF
 	fi
         echo -n $"Starting $prog: "
-	if [[ -n "$RE_USER" ]]
-	then
+	if [[ -n "$SET_USER" ]];then
 		# shellcheck disable=SC2086
-		daemon --user "$RE_USER" --pidfile="${pidfile}" "$rtpengine" $OPTS
+		daemon --user "$SET_USER" --pidfile="${pidfile}" "$rtpengine" $OPTS
 	else
 		# shellcheck disable=SC2086
 		daemon --pidfile="${pidfile}" "$rtpengine" $OPTS
@@ -252,24 +177,23 @@ stop() {
 	killproc -p "${pidfile}" "$rtpengine"
 	RETVAL=$?
 	echo
-	if [ -f "$cachefile" ]
-	then
+	if [ -f "$cachefile" ];then
 		. "$cachefile"
 		echo "Unloading module for in-kernel packet forwarding"
 		echo "del $TABLE" > /proc/rtpengine/control
 		firewall-cmd --state 2>/dev/null
-		if [[ $? == 0 ]]
-		then
+		if [[ $? == 0 ]];then
 			firewall-cmd --direct --remove-rules ipv4 filter rtpengine
 			firewall-cmd --direct --remove-rules ipv6 filter rtpengine
 			firewall-cmd --direct --remove-rule ipv4 filter INPUT_prefilter 0 -j rtpengine
 			firewall-cmd --direct --remove-chain ipv4 filter rtpengine
 			firewall-cmd --reload
 		else
-			iptables -D rtpengine -p udp -j RTPENGINE --id "$CUR_TABLE"
-			ip6tables -D rtpengine -p udp -j RTPENGINE --id "$CUR_TABLE"
-			iptables -t filter -D INPUT -j rtpengine
-			iptables -X rtpengine
+			for fw in iptables ip6tables;do
+				$fw -D rtpengine -p udp -j RTPENGINE --id "$CUR_TABLE"
+				$fw -t filter -D INPUT -j rtpengine
+				$fw -X rtpengine
+			done
 		fi
 		rmmod xt_RTPENGINE
 		rm -f "$cachefile"
diff --git a/el/rtpengine.spec b/el/rtpengine.spec
index 2eae9e154..d484c9e1c 100644
--- a/el/rtpengine.spec
+++ b/el/rtpengine.spec
@@ -1,6 +1,6 @@
 Name:		ngcp-rtpengine
-Version:	4.5.0
-Release:	0%{?dist}
+Version:	6.4.0.0
+Release:	1%{?dist}
 Summary:	The Sipwise NGCP rtpengine
 
 Group:		System Environment/Daemons
@@ -48,6 +48,16 @@ Requires(preun): dkms
 %description dkms
 %{summary}.
 
+
+%package recording
+Summary:        NGCP rtpengine recording daemon packet
+Group:          System Environment/Daemons
+BuildRequires:  gcc make redhat-rpm-config mysql-devel
+
+%description recording
+%{summary}.
+
+
 %define binname rtpengine
 
 %{!?kversion: %define kversion %(uname -r)}
@@ -63,6 +73,8 @@ cd daemon
 RTPENGINE_VERSION="\"%{version}-%{release}\"" make
 cd ../iptables-extension
 RTPENGINE_VERSION="\"%{version}-%{release}\"" make
+cd ../recording-daemon
+RTPENGINE_VERSION="\"%{version}-%{release}\"" make
 cd ..
 
 
@@ -71,13 +83,26 @@ cd ..
 install -D -p -m755 daemon/%{binname} %{buildroot}%{_sbindir}/%{binname}
 # Install CLI (command line interface)
 install -D -p -m755 utils/%{binname}-ctl %{buildroot}%{_sbindir}/%{binname}-ctl
+# Install recording daemon
+install -D -p -m755 recording-daemon/%{binname}-recording %{buildroot}%{_sbindir}/%{binname}-recording
 
 ## Install the init.d script and configuration file
 install -D -p -m755 el/%{binname}.init \
 	%{buildroot}%{_initrddir}/%{name}
+install -D -p -m755 el/%{binname}-recording.init \
+        %{buildroot}%{_initrddir}/%{name}-recording
 install -D -p -m644 el/%{binname}.sysconfig \
 	%{buildroot}%{_sysconfdir}/sysconfig/%{binname}
+install -D -p -m644 el/%{binname}-recording.sysconfig \
+	%{buildroot}%{_sysconfdir}/sysconfig/%{binname}-recording
 mkdir -p %{buildroot}%{_sharedstatedir}/%{name}
+mkdir -p %{buildroot}%{_var}/spool/%{binname}
+
+# Install config files
+install -D -p -m644 etc/%{binname}.sample.conf \
+	%{buildroot}%{_sysconfdir}/%{binname}/%{binname}.conf
+install -D -p -m644 etc/%{binname}-recording.sample.conf \
+	%{buildroot}%{_sysconfdir}/%{binname}/%{binname}-recording.conf
 
 # Install the iptables plugin
 install -D -p -m755 iptables-extension/libxt_RTPENGINE.so \
@@ -140,12 +165,12 @@ true
 %{_sbindir}/%{binname}
 # CLI (command line interface)
 %{_sbindir}/%{binname}-ctl
-
 # init.d script and configuration file
 %{_initrddir}/%{name}
 %config(noreplace) %{_sysconfdir}/sysconfig/%{binname}
 %attr(0750,%{name},%{name}) %dir %{_sharedstatedir}/%{name}
-
+# default config
+%{_sysconfdir}/%{binname}/%{binname}.conf
 # Documentation
 %doc LICENSE README.md el/README.el.md debian/changelog debian/copyright
 
@@ -161,7 +186,22 @@ true
 %endif
 
 
+%files recording
+# Recording daemon
+%{_sbindir}/%{binname}-recording
+# Init script
+%{_initrddir}/%{name}-recording
+# Sysconfig
+%config(noreplace) %{_sysconfdir}/sysconfig/%{binname}-recording
+# Default config
+%{_sysconfdir}/%{binname}/%{binname}-recording.conf
+# spool directory
+%attr(0750,%{name},%{name}) %dir %{_var}/spool/%{binname}
+
 %changelog
+* Tue Jul 10 2018 netaskd <netaskd@gmail.com> - 6.4.0.0-1
+  - update to ngcp-rtpengine version 6.4.0.0
+  - add packet recording
 * Thu Nov 24 2016 Marcel Weinberg <marcel@ng-voice.com>
   - Updated to ngcp-rtpengine version 4.5.0 and CentOS 7.2 
   - created a new variable "binname" to use rtpengine as name for the binaries
diff --git a/el/rtpengine.sysconfig b/el/rtpengine.sysconfig
index d1110c3e5..d01092ad2 100644
--- a/el/rtpengine.sysconfig
+++ b/el/rtpengine.sysconfig
@@ -1,34 +1,26 @@
 # For more information on configuring rtpengine see
 # http://github.com/sipwise/rtpengine
-#
-# (m) means the item is mandatory, (o) means the item is optional
-#
-KERNEL=yes		# (m) "yes" enable in-kernel forwarding, "no" disables
-TABLE=0			# (o) iptables table for in-kernel forwarding rules
-			#     comment out when "KERNEL=no"
-FALLBACK=yes		# (m) "yes" enables fallback to userspace forwarding
-			#     only, "no" disables
-RTP_IP[0]=127.0.0.1	# (m) Local IPv4/6 address for RTP. The format of the value is [NAME/]IP[!IP].
-#
+
+CONFIG_FILE=/etc/rtpengine/rtpengine.conf # main config file
+PIDFILE=/var/run/ngcp-rtpengine-daemon.pid # pid
+KERNEL=yes		# "yes" enable in-kernel forwarding, "no" disables
+TABLE=0			# iptables table for in-kernel forwarding rules. Ignored if "KERNEL=no"
+FALLBACK=yes		# "yes" enables fallback to userspace forwarding only.
+RTP_IP[0]=127.0.0.1	# Local IPv4/6 address for RTP. The format of the value is [NAME/]IP[!IP].
+
 # At least one of LISTEN_(TCP|UDP|NG) is required
-#LISTEN_TCP=127.0.0.1:2222	# IP address and port combination for TCP
-				# control
-LISTEN_UDP=127.0.0.1:2222	# IP address and port combination for UDP
-				# control
-#LISTEN_NG=127.0.0.1:2223 	# IP address and port combination for NG (UDP)
-				# control
+#LISTEN_TCP=127.0.0.1:2222	# IP address and port combination for TCP control
+LISTEN_UDP=127.0.0.1:2222	# IP address and port combination for UDP control
+#LISTEN_NG=127.0.0.1:2223 	# IP address and port combination for NG (UDP) control
 #LISTEN_CLI=127.0.0.1:9900
+
 #
-#TOS=184		# (o) TOS value to use in outgoing packets
-#TIMEOUT=60		# (o) Number of seconds after which a media stream is
-			#     considered dead if there is no traffic.
-			#     Default: 60
-#SILENT_TIMEOUT=3600	# (o) Number of seconds after which a muted or inactive
-			#     stream is considered dead. Default: 3600
-#PORT_MIN=30000		# (o) Lowest port in the local port range for media
-			#     traffic. Default: 30000
-#PORT_MAX=40000		# (o) Highest port in the local port range for media
-			#     traffic. Default: 40000 
+#TOS=184		# TOS value to use in outgoing packets
+#TIMEOUT=60		# Number of seconds after which a media stream is considered dead if there is no traffic. Default: 60
+#SILENT_TIMEOUT=3600	# Number of seconds after which a muted or inactive stream is considered dead. Default: 3600
+#PORT_MIN=30000		# Lowest port in the local port range for media traffic. Default: 30000
+#PORT_MAX=40000		# Highest port in the local port range for media traffic. Default: 40000 
+
 #
 #LOG_LEVEL=6		# Log level to use
 #LOG_FACILITY=daemon    # Syslog facility to use
@@ -41,10 +33,11 @@ LISTEN_UDP=127.0.0.1:2222	# IP address and port combination for UDP
 #REDIS_DB=0
 #B2B_URL=http://127.0.0.1:8080/xmlrpc
 
-#RE_USER=ngcp-rtpengine	# Run rtpengine as this specific user
-
-#RE_GROUP=ngcp-rtpengine # allow this group to control rtpengine in kernel mode
+# User
+#SET_USER=ngcp-rtpengine	# Run rtpengine as this specific user
+#SET_GROUP=ngcp-rtpengine	# allow this group to control rtpengine in kernel mode
 
 #HOMER_SERVER=127.0.0.1:9060	# Address of Homer server for RTCP stats
 #HOMER_PROTO=udp		# Transport protocol for Homer (default udp)
 #HOMER_CAPTURE_ID=1234		# 'Capture ID' to use within the HEP protocol
+