/proc/111/net/ip_tables_matches