code: func getIptablesWaitFlag(vstring string) []string {
  	version, err := semver.NewVersion(vstring)
  	if err != nil {
  		glog.Errorf("vstring (%s) is not a valid version string: %v", vstring, err)
  		return nil
  	}
  
  	minVersion, err := semver.NewVersion(MinWaitVersion)
  	if err != nil {
  		glog.Errorf("MinWaitVersion (%s) is not a valid version string: %v", MinWaitVersion, err)
  		return nil
  	}
  	if version.LessThan(*minVersion) {
  		return nil
  	}
  
  	minVersion, err = semver.NewVersion(MinWait2Version)
  	if err != nil {
  		glog.Errorf("MinWait2Version (%s) is not a valid version string: %v", MinWait2Version, err)
  		return nil
  	}
  	if version.LessThan(*minVersion) {
  		return []string{"-w"}
  	} else {
  		return []string{"-w2"}
  	}
  }
docs: // Checks if iptables version has a "wait" flag