nth, random and fuzzy match

[Patrick McHardy <kaber@trash.net>]

Also following the decisions from the netfilter workshop,
I've started merging nth and random into a new "statistic"
match. I won't merge fuzzy since it seems to obscure and
complex and I don't see what it offers beyond nth + random.

The current nth match optionally uses shared state for the
counters (which as we know isn't pretty with the current
iptables userspace interface) and has a compile-time limit
on the number of shared counters. I don't see the need for
this shared state, I think everything expressable today
should also be expressable using just per-match state.

So my questions to the nth users: is anyone using the nth
match in a way that can't be done by just matching on every
nth packet with an optional starting point?