http://user.informatik.uni-goettingen.de/~le/papers/Netfilter.pdf
http://www.iptables.info/en/structure-of-iptables.html
这篇文章不错
http://www.cnblogs.com/iceocean/articles/1594196.html
tcp链接追踪源码
http://tomoyo.osdn.jp/cgi-bin/lxr/source/net/netfilter/nf_conntrack_proto_tcp.c?v=linux-4.1.6