netfilter: introduce nf_conn_acct structure