Conntrack timeout policy library