//proc/self/net/ip_tables_matches