Function walk_netfilter_rules 

pub fn walk_netfilter_rules<P: PhysicalMemoryProvider>(
    reader: &ObjectReader<P>,
) -> Result<Vec<NetfilterRuleInfo>>

Walk kernel iptables tables and extract rules.

Attempts to find the init_net namespace, then reads each registered iptables table (filter, nat, mangle) and parses rule entries.