Simple ss-based (iproute2 tool) polling conntrack implementation

Doesn't require elevated privileges, unlike e.g. libconntrack.
Same reasoning is for picking "mtr" over raw sockets.