divert-packet


An implementation of divert(4) sockets.
Used to pass raw packets between PF and userland.

PF bounces matching packets to userland
The packet will be dropped in the kernel
Userland can drop, modify and/or reinject it

  pass out on em0 divert-packet 9000

The naming is a bit unfortunate:
divert-packet can be confused with divert-to.
divert-packet handles raw packets (IPv4/IPv6)
divert-to forwards stateful PF connections (TCP/UDP)
divert-reply is not related to divert at all (SO_BINDANY)