nf-conntrack: allow querying conntrack info in nfqueue