Hello, Running amd64 GENERIC.MP -current.
Started seeing truncated entries in pflog like this: ====================================== ...rule 42/(match) block out on em0: [|ip] ====================================== They seemed to start after the last build to -current where this got logged: ====================================== pflogd[17975]: Existing file has different snaplen 116, using it ====================================== So I shut down the pflog interface, rm /var/log/pflog and restarted the system. Forced a log event and the truncation issue appears solved. However I always get this as the first line when reading pflog: ====================================== tcpdump: WARNING: compensating for unaligned libpcap packets ====================================== Other systems (not running -current) do not have this issue. Any ideas? Thanks. Chris
