Hello David, Sorry to coming back to you after some delay...
I'm afraid I need some clarification. The commit/version you are referring to changed nothing as far as I can tell. It just moved the existing code to new place. also looking at pfctl_load_fingerprints() function call path itself I see there is nothing printed (nothing to stdout, nothing to stderr). can you share actual output of 'pfctl -sa' and output you would expect? thanks and regards sashan On Sat, Jun 13, 2026 at 09:29:37AM +0100, Tarma Support wrote: > Hello, > > According to its man page, pfctl(8) with option -s all should print all > filter parameters except the list of the interfaces and the list of > operating system fingerprints (OSFP). > > This worked as documented until revision 1.399 of src/sbin/pfctl/pfctl.c > (committed 11 November 2025), when the logic of the -s option was rewritten > to accommodate the new source and state limiters. Since that revision, the > OSFP list is printed as part of the -s all option. > > This addition was probably by mistake; earlier revisions did not print the > OSFP list (although they did load the list, it wasn't printed). > > My suggestion is to revert to the original and documented behaviour, and not > to print the OSFP list as part of -s all, by dropping the line: > > pfctl_show_fingerprints(opts); > > from the "case SHOWOPT_ALL:" in the main() routine of src/sbin/pfctl/pfctl.c > > -- David Adams > --------8<--------
