Hi, Others have discussed our problem but I cannot see that this has been implement (I cannot find a man page referring to this). http://openbsd.7691.n7.nabble.com/carp-init-delay-td226187.html
I.e. When a firewall boots up, the connected switch port starts STP and is initially blocked, causing the newly booting firewall to think it is master, the port then starts forwarding and I have double master. This causes issues with other daemons too which monitor the CARP state like sasynd, BGPD etc... I have enabled port fast where I can. However I cannot guarantee this and the WAN connections to our data centre network do not want to enable port past. This means I have to set a high advbase, but this ruins the response time. I could add "!sleep 5" to the top of carp interfaces as suggested in the link above but this really belongs in the kernel as this only helps with the firewall reboot condition and not all the other possible network state changes etc like the removal of a NIC and reconnection (which restarts STP etc). Has this been done? :)
