One of my favorite ports is pfstat. I've used it religiously for years with minor firewalls for bandwidth and queue graphs. When ALTQ was retired, pfstat could no longer graph my queues and this is still the case today. The correct behavior here would be for me to roll up my college-level C sleeves and fix pfstat, but I did not take this route and, instead, took the lesser route and wrote a script that parses pfctl's output. A big reason for me doing this was related to Medium (I have no affiliation with them) releasing/open sourcing their pretty and simple data visualization tool, Charted, and there are more details about this at https://medium.com/@sall/using-charted-2149df6bb0bd.
If you are interested, a snapshot of my queue graph is at http://bink.mooo.com/~daniel/pub/pfqstat.jpg and you can currently grab pfqstat from http://bink.mooo.com/~daniel/pub (read the initial comments in the script before using). Please know I am currently the only person using this script, so it might be horribly broken for some and I welcome most comments, criticism and patches. Please do not use misc@ for questions or issues with this script--email me directly. Cheers.
