[NETFILTER]: xt_connmark match, revision 1