From: Matthew Mondor <mmondor@pulsar-zone.net>
Date: Thu, 2 Jul 2015 01:09:26 +0000 (+0000)
Subject: *** empty log message ***
X-Git-Url: http://git.pulsar-zone.net/?a=commitdiff_plain;h=764aebcecdc7f9570ef6bd79ca0d5b40114a062f;p=mmondor.git

*** empty log message ***
---

diff --git a/netbsd/netbsd_improvements.txt b/netbsd/netbsd_improvements.txt
index c9c382d..616088f 100644
--- a/netbsd/netbsd_improvements.txt
+++ b/netbsd/netbsd_improvements.txt
@@ -10,6 +10,19 @@ Status, defined by the first column:
 * The fix that was submitted via PR was accepted and commited.
 
 
+- NPF
+  - Lack of proper diagnostics/stats
+  - Lacks various old ipfilter features which are necessary
+  - Things like icmp-type and icmp-code symbolic names undocumented, numbers
+    must be used except for some
+  - Can display as syntax errors other problems
+  - Documentation not properly synchronized with implementation, and lacking
+  - npfctl show  bogus
+  - npfctl stop  may lock in a busy loop, unkillable process
+  - npfctl stats cannot show per-rule hits
+  - Annoying syntax changes between versions
+  - Appears too immature on netbsd-6, to recheck on netbsd-7
+
 - veriexec
   - Lock related panic when attempting to write to a veriexec protected file
     in strict level 2.