conntrack - if the source is empty, use the OS hostname