Bug 242045

Summary: pf can't be unloaded if pflog loaded.
Product: Base System Reporter: sasamotikomi
Component: kernAssignee: freebsd-pf (Nobody) <pf>
Status: Closed Not A Bug    
Severity: Affects Many People CC: kp
Priority: ---    
Version: 12.1-RELEASE   
Hardware: Any   
OS: Any   

Description sasamotikomi 2019-11-18 03:42:49 UTC 
But unloading pflog unload pf as well.
But they shouldn't be dependence, pf should work even if pflog hang or crash (but obliviously disabling logging and wait until it available and report about it)
Pflog as well should report about pf crash or hang.
Comment 1 Kristof Provost freebsd_committer freebsd_triage 2019-11-18 16:07:15 UTC 
pflog depends on pf. It's not possible to load pflog unless pf is loaded (or more accurately, "kldload pflog" will implicitly load pf as well). That also implies that you cannot unload pf itself until pflog is unloaded. That's entirely expected.

There's no scenario where pflog can crash without taking the entire kernel down.