Hello,
According to its man page, pfctl(8) with option -s all should print all
filter parameters except the list of the interfaces and the list of
operating system fingerprints (OSFP).
This worked as documented until revision 1.399 of src/sbin/pfctl/pfctl.c
(committed 11 November 2025), when the logic of the -s option was
rewritten to accommodate the new source and state limiters. Since that
revision, the OSFP list is printed as part of the -s all option.
This addition was probably by mistake; earlier revisions did not print
the OSFP list (although they did load the list, it wasn't printed).
My suggestion is to revert to the original and documented behaviour, and
not to print the OSFP list as part of -s all, by dropping the line:
pfctl_show_fingerprints(opts);
from the "case SHOWOPT_ALL:" in the main() routine of src/sbin/pfctl/pfctl.c
-- David Adams
