netfilter: conntrack: udp: only extend timeout to stream mode after 2s