After reading through the manpage for pfctl, I wonder if there's a mechanism/equivalent for PF that shows the timestamp of the last "hit" on a rule... similar to "ipfw -t"...? Might be useful to include a function to output stats in XML for further parsing. Thanks.