trace a packet in linux netfilter tables/chains