iptables-translate -A INPUT -m connlabel --label 40 nft add rule ip filter INPUT ct label 40 counter
iptables-translate -A INPUT -m connlabel ! --label 40 --set nft add rule ip filter INPUT ct label set 40 ct label and 40 != 40 counter
