2011: OpenBSD 4.9 Henning rewrote most of the log subsystem for performance and features logging on the fly as we traverse the ruleset logging a packet more than once trace ruleset traversal