> > 	I thought someone may want "no packet at all"...
>Seems like the way to do that is with a filter, rather than a
>rate-limiter?

	point taken, but i think ppsratecheck(9) has to be generic enough.
	(notice that the change is ppsratecheck, not to tcp/icmp{,6} code)

itojun