A few things that has me confused ...
1) pf(4) says DIOCSETDEBUG has enum { PF_DEBUG_NONE, PF_DEBUG_URGENT, ...
but these names are not in pfvar.h nor anywhere else in the source tree
(AFAICT). What should the legal values (or names) be?
2) pf.conf(5) says "set debug" can be one of loud, misc, none, or urgent
but if you "set debug loud" in pf.conf and load it the pfctl -sa output
will say "Debug: debug", or if you "set debug misc" it will say "Debug:
notice". It does not say what you set in pf.conf.
3) pfctl(8) -x option lets you set one of emerg, alert, crit, err,
warning, notice, info, or debug. These will show up by their correct
name in pfctl -sa output. They're also valid names in pf.conf so
should they not also be mentioned in pf.conf(5)?
Cheers,
Thomas.