Optimized conntrack (thanks to Joe Burpee)