Getting Linux nflog and tcpdump packet filters to sort of work together