nflog on a per-conn basis using nflog=