Aha! I finally found what was happening. An application in the certification interfaces went crazy. It tried to open so many connections it exhausted the state table, which explains the hanging packet.
Hurray for pfctl -s state | wc -l (10k, 9k, 9k, 10k, 10k, ....) Now to strangle that bastard.... Rui -- + No matter how much you do, you never do enough -- unknown + Whatever you do will be insignificant, | but it is very important that you do it -- Gandhi + So let's do it...? [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]
