On Sat, 11 Jun 2005 04:13:43 GMT, dave wrote:
> tcpdump of ftp
> #tcpdump -i pflog0 -ntqv

By the way, the -e flag to tcpdump is really useful for debugging pf
rules. It tells you the rule that matched for each packet you log. It's
a huge help when you're trying to figure out why something isn't working.
Try it with your rules and see if you find anything interesting.