//proc/606/net/ip_tables_matches