Jim Reid <jim@mpn.cp.philips.com>  wrote:
 > But /etc/ipf.conf and ipfstat are not universal. And doesn't using
 > this mean every packet going in or out the monitored interface makes a
 > trip through the Berkeley Packet Filter? [My NetBSD box and source
 > code is not to hand so I can confirm this.]

a) as universal as "distributed with NetBSD".  All you have to do is
enable it in your kernel.

b) IPF doesn't use BPF...