I would appreciate any donations. Wishlist or send e-mail type donations to maekawa AT daemon-systems.org.
NPF(7) Miscellaneous Information Manual NPF(7) NAME NPF -- NetBSD packet filter DESCRIPTION NPF is a layer 3 packet filter, supporting IPv4 and IPv6 as well as layer 4 protocols such as TCP, UDP, and ICMP. It was designed with a focus on high performance, scalability, and modularity. NPF was written from scratch in 2009 and is distributed under the 2-clause BSD license. FEATURES NPF offers the traditional set of features provided by packet filters. Some key features are: o Stateful inspection (connection tracking). o Network address translation (NAT). This includes static (stateless) and dynamic (stateful) translation, port translation, bi-directional NAT, etc. o IPv6-to-IPv6 network prefix translation (NPTv6). o Tables for efficient IP sets. o Application Level Gateways (e.g., to support traceroute). o NPF uses BPF with just-in-time (JIT) compilation. o Rule procedures and a framework for NPF extensions. o Traffic normalization (extension). o Packet logging (extension). For a full set of features and their description, see the NPF documentation and other manual pages. SEE ALSO libnpf(3), bpf(4), bpfjit(4), npf.conf(5), pcap-filter(7), npfctl(8) NPF documentation: http://www.netbsd.org/~rmind/npf/ HISTORY NPF first appeared in NetBSD 6.0. AUTHORS NPF was designed and implemented by Mindaugas Rasiukevicius. NetBSD 7.1.2 July 13, 2015 NetBSD 7.1.2