[NETFILTER]: nf_conntrack: replace horrible hack with ksize()