In some email I received from Sam Carleton, sie wrote:
> Looking at the ipf-HOWTO, it speaks of ipmon.  It clams, as the man
> pages clams, that ipmon -o S will show me what is going on in real
> time.  Or at least that is how I interpert "f we wanted to watch the
> state table in action, ipmon -o S would show this".  I am not seeing
> anything on my NetBSD machine, nor do I see anything when I try ipmon -o
> I.  But there is tons of info when I do ipmon -o N.  Might this help put
> some light on what the problem is when my firewall?

"-o N" shows NAT table changes that get logged.
"-o S" shows state table changes that get logged.

Darren