Hi, If I do not set and logging options in 'pf.conf' I guess PF will log everything to /var/log/pflog and I can see the contents using tcpdump? Also I have a file named 'pflog.bad.0756960b' in /var/log. What does it contain? Thanks --Siju