first version supporting nfnetlink direct. untested.