git: 0ce36b069850 - main - pfctl.8: describe the counters that "pfctl -s info" displays

The branch main has been updated by kp:

URL: https://cgit.FreeBSD.org/src/commit/?id=0ce36b0698509e834ee406552035040b0a20856c

commit 0ce36b0698509e834ee406552035040b0a20856c
Author:     Kristof Provost <kp@FreeBSD.org>
AuthorDate: 2025-02-05 12:31:51 +0000
Commit:     Kristof Provost <kp@FreeBSD.org>
CommitDate: 2025-02-12 08:29:09 +0000

    pfctl.8: describe the counters that "pfctl -s info" displays
    
    Tweaks jmc@, ok deraadt@
    
    Obtained from:  OpenBSD, sthen <sthen@openbsd.org>, 83e508aa68
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
---
 sbin/pfctl/pfctl.8 | 43 ++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 42 insertions(+), 1 deletion(-)

diff --git a/sbin/pfctl/pfctl.8 b/sbin/pfctl/pfctl.8
index 00fbda042b7c..a5407999cdda 100644
--- a/sbin/pfctl/pfctl.8
+++ b/sbin/pfctl/pfctl.8
@@ -24,7 +24,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd November 25, 2024
+.Dd February 5, 2025
 .Dt PFCTL 8
 .Os
 .Sh NAME
@@ -476,6 +476,47 @@ can be used to select an interface or a group of interfaces.
 Show all of the above, except for the lists of interfaces and operating
 system fingerprints.
 .El
+.Pp
+Counters shown with
+.Fl s Cm info
+are:
+.Pp
+.Bl -tag -width xxxxxxxxxxxxxx -compact
+.It match
+explicit rule match
+.It bad-offset
+currently unused
+.It fragment
+invalid fragments dropped
+.It short
+short packets dropped
+.It normalize
+dropped by normalizer: illegal packets
+.It memory
+memory could not be allocated
+.It bad-timestamp
+bad TCP timestamp; RFC 1323
+.It congestion
+network interface queue congested
+.It ip-option
+bad IP/IPv6 options
+.It proto-cksum
+invalid protocol checksum
+.It state-mismatch
+packet was associated with a state entry, but sequence numbers did not match
+.It state-insert
+state insertion failure
+.It state-limit
+configured state limit was reached
+.It src-limit
+source node/connection limit
+.It synproxy
+dropped by synproxy
+.It map-failed
+address mapping failed
+.It translate
+no free ports in translation port range
+.El
 .It Fl T Ar command Op Ar address ...
 Specify the
 .Ar command