Tcpdump doesn't do any blocking of packets. Sometimes when there is a lot of traffic, tcpdump notices that it cannot decode all incoming packets. Then it just skips, or drops decoding some of them and lets you know by saying something like 1232 packets dropped. Apparently it told you "0 packets dropped", so it could decode and show you everything. No hiatus,
Now some homework, if you fail, you have to redo last semester
.
What does the
pf.conf manual say about 'match' ? Please paste that man page section here using [code] and [/code] tags.