XT_CONNTRACK_STATE
if (info->match_flags & XT_CONNTRACK_STATE) {
!(info->invert_flags & XT_CONNTRACK_STATE))
return info->match_flags & XT_CONNTRACK_STATE;