I know that PF will log packet headers in libpcap format, but this has no rule info attched to it. Is there a way to get ipf style logging/monitoring enabled? I would like to see src.port -> dest.port rule# action(pass, block), is there an easy way to generate this or turn it on. I read the pf faq if it is there I must have missed it. thanks marc