log goodies pcap logs, on pflogX interfaces can have multiple can log a single packet multiple times logging accurately and immediately ruleset tracing match log(matches) from 10.0.0.1 match log(all, to pflog23) proto tcp to port 25