https://clickhouse.com/blog/kubenetmon-open-sourced
the data collection method says: "conntrack with nf_conntrack_acct"