add netfilter queue support

Using the netfilter queue as packet source the application is
able to drop packets on the INPUT and OUTPUT chain. This can be
used to write an anaylzer that interrupts unwanted packet flows.

+add flag first_layer to decap to support packet sources returning data
above L2, adapt all depending functions
+add netfileter queue packet handling