sorry if this is naive. i wonder how packet flow in / out pf framework within kernel, is it BSD Packet Filter (BPF) approach...? appreciate if people can shed some light where to start tracing pf code. thanks in advance.