===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/systat/pftop.c,v
retrieving revision 1.7
retrieving revision 1.8
diff -u -r1.7 -r1.8
--- src/usr.bin/systat/pftop.c	2008/11/05 15:48:44	1.7
+++ src/usr.bin/systat/pftop.c	2009/01/01 22:50:39	1.8
@@ -1,4 +1,4 @@
-/* $Id: pftop.c,v 1.7 2008/11/05 15:48:44 canacar Exp $	 */
+/* $Id: pftop.c,v 1.8 2009/01/01 22:50:39 mcbride Exp $	 */
 /*
  * Copyright (c) 2001, 2007 Can Erkin Acar
  * Copyright (c) 2001 Daniel Hartmeier
@@ -36,6 +36,7 @@
 
 #include <net/if.h>
 #include <netinet/in.h>
+#include <netinet/tcp.h>
 #include <netinet/tcp_fsm.h>
 #include <net/pfvar.h>
 #include <arpa/inet.h>
@@ -1374,11 +1375,16 @@
 		tb_print_ugid(pr->gid.op, pr->gid.gid[0], pr->gid.gid[1],
 		        "group", GID_MAX);
 
-	if (pr->flags || pr->flagset) {
-		tbprintf(" flags ");
-		tb_print_flags(pr->flags);
-		tbprintf("/");
-		tb_print_flags(pr->flagset);
+	if (pr->action == PF_PASS &&
+	    (pr->proto == 0 || pr->proto == IPPROTO_TCP) &&
+	    (pr->flags != TH_SYN || pr->flagset != (TH_SYN | TH_ACK) )) {
+		tbprintf("flags ");
+		if (pr->flags || pr->flagset) {
+			tb_print_flags(pr->flags);
+			tbprintf("/");
+			tb_print_flags(pr->flagset);
+		} else
+			tbprintf("any ");
 	}
 
 	tbprintf(" ");