CVS: cvs.openbsd.org: src

[Ryan Thomas McBride <mcbride_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>]

CVSROOT:	/cvs
Module name:	src
Changes by:	mcbride_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2008/06/10 14:55:02

Modified files:
	share/man/man5 : pf.conf.5 
	sys/net        : pf_table.c pfvar.h 
	sbin/pfctl     : parse.y pfctl.8 pfctl_parser.c pfctl_table.c 

Log message:
Make counters on table addresses optional and disabled by default.
Use the 'counters' table option in pf.conf if you actually need them.
If enabled, memory is not allocated until packets match an address.

This saves about 40% memory if counters are not being used, and paves the way
for some more significant cleanups coming soon.

ok henning mpf deraadt