"connlabel" match support

modulename: xt_connlabel.ko


Linux Kernel Configuration
└─>Networking support
└─>Networking options
└─>Network packet filtering framework (Netfilter)
└─>Core Netfilter Configuration
└─>"connlabel" match support
In linux kernel since version 3.1 (release Date: 2011-10-24)  
This match allows you to test and assign userspace-defined labels names
to a connection. The kernel only stores bit values - mapping
names to bits is done by userspace.

Unlike connmark, more than 32 flag bits may be assigned to a
connection simultaneously.

source code: