On FreeBSD 5.2.1. I installed pf from the ports, configured and ran it. I just get this error when trying to watch pf's logs: [root at nat] ~ $ tcpdump -n -e -ttt -r /var/log/pflog tcpdump: unknown data link type 117 Why can't they just put the logs in text not in some damn binary..