libnetfilter_conntrack wrapper subset using cgo