Thomas Klausner said:

>I just backed out a change to net/pfil.[ch], netinet/ip_fil.c,
>netinet/ip_input.c, and netinet6/ip6_input.c -- please try updating
>those files and building a new kernel, and report if that fixes the
>problem for you, too.

It seems to be pretty much working now. I'm not certain if snort
is working correctly, I'll have to wait a while and see, but tcpdump
works okay. Snort works with 1.5N, but stopped working with 1.5O and
1.5P. It's usually pretty noisy, but I've only been up for about
40 minutes.

-- 
Rick Kelly  rmk@rmkhome.com  www.rmkhome.com