Getting the checksum with pfctl(8) is either in your finger's muscle memory or takes guess work as the manual doesn't mention it.
I grepped the code to see that I need `-s info' with `-v'. (Setting) hostid is described in pf.conf(5) but pfctl(8) doesn't tell us how to print it, there's merely an example for killing states based on it. Complete the description of `-s info' to mention and describe both such that grepping for it in the manual pager yields any results. Feedback? OK? Index: pfctl.8 =================================================================== RCS file: /cvs/src/sbin/pfctl/pfctl.8,v retrieving revision 1.180 diff -u -p -r1.180 pfctl.8 --- pfctl.8 15 Jan 2020 14:39:41 -0000 1.180 +++ pfctl.8 20 Jul 2020 13:17:15 -0000 @@ -403,7 +403,10 @@ Show the contents of the source tracking Show filter information (statistics and counters). When used together with .Fl v , -source tracking statistics are also shown. +source tracking statistics as well as the firewall's 32-bit hostid +number and the main ruleset's MD5 checksum for use with +.Xr pfsync 4 +are also shown. .It Fl s Cm labels Show per-rule statistics (label, evaluations, packets total, bytes total, packets in, bytes in, packets out, bytes out, state creations) of
