I think this is a bug in the loadable VLAN code; there's a != which should be an ==, which results in packets with known tags being discarded and would result in packets with unknown tags causing a null pointer dereference. I'll commit a fix soon as soon as I've tested it more.
Bill To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message