K 10
svn:author
V 7
glebius
K 8
svn:date
V 27
2012-05-29T12:33:09.202651Z
K 7
svn:log
V 504
We can't trust V_pf_status.states++ and V_pf_status.states--
in the forwarding path as soon as we get out of the pf giant lock.

o Use uma_zone_get_cur() to estimate current number of states.
  Since function is considered too expensive, run it in the expiry
  thread only, and not for every state examined.
  XXX: this may make adaptive timeouts and expire times sent via
  pfsync less precise under certain circumctances.

o Run state expiry 10 times more often with 10 times smaller
  chunk argument.

END