logging improved


before, all logging was actually done after ruleset traversal

now we can call pflog_packet whenever we want, basically

and so we do on "match log"

so the packet is logged like pf sees it at that very same moment