Filter xtable wait messages when using firewalld
Filter xtable wait messages when using firewalld

This gets filtered for raw iptables calls, but not from calls made
through firewalld.   The patch just ensures consistency of operation.
It also adds a warning when xtables contention detected and truncates
the search string slightly as it appears that the suffix will be
changing in the near future.

Signed-off-by: Chris Telfer <9cf1a5ba8f085fe3bf87fd3e4704febafc338899@docker.com>

docker/libnetwork,medallia/libnetwork,abhi/libnetwork,medallia/libnetwork,docker/libnetwork,docker/libnetwork,mahak/libnetwork,mahak/libnetwork,vdemeester/libnetwork,mahak/libnetwork,vdemeester/libnetwork,abhi/libnetwork,medallia/libnetwork,abhi/libnetwork,vdemeester/libnetwork