better output for conntrack check