hi,

> With todays' current (ie. including version 1.4 of  
> src/sys/dist/pf/net/pf_table.c), I get a reproducible panic: bpf_mcpy.  
> The kernel was built with 'pseudo-device   pf' and 'pseudo-device    
> pflog' and the panic occurs while running 'nmap -sS -sU -O' against  
> this host from a distant machine. 'tcpdump -n -i pflog0' show a couple  
> of hundred packets being blocked by the filter.

please try if_pflog.c rev.1.4.

YAMAMOTO Takashi