as an example of the problem:
ipf -f -
pass in all
pass in proto udp from 10.3.1.1 to 10.4.2.2 head 100
pass in proto tcp from 10.1.1.1 to 10.2.2.2 group 200
pass out all
pass out proto udp from 10.3.1.1 to 10.4.2.2 head 300
pass out proto tcp from 10.1.1.1 to 10.2.2.2 group 400
netbsd-current# ipfstat -io
pass out all
pass out inet proto udp from 10.3.1.1/32 to 10.4.2.2/32 head 300
pass in all
pass in inet proto udp from 10.3.1.1/32 to 10.4.2.2/32 head 100
ipfstat -g
Filter groups (active):
100
200
300
400
Filter groups (inactive):
Accounting groups (active):
Accounting groups (inactive):
Authentication groups (active):
Authentication groups (inactive):