Keeping an eye on things with systat states

In OpenBSD 4.5 and newer, systat offers PF-relevant views, eg systat states

   3 users    Load 1.42 1.37 1.33  (1-8 of 177)       Wed Feb 17 14:22:12 2010

PR   D SRC                  DEST                 STATE   AGE   EXP  PKTS BYTES  RATE  PEAK   AVG RU GW
tcp  I 192.168.103.254:6525 88.87.60.159:5222     4:4  5415m 86395 39351 6655K     0   126    20  *
tcp  O 213.187.179.198:6525 88.87.60.159:5222     4:4  5415m 86395 39351 6655K     0   126    20  * 192.168.103.254:6525
tcp  I 192.168.103.254:5840 88.87.57.57:22        4:4  4236m 86190  100K   52M     0     0   217  *
tcp  O 213.187.179.198:5840 88.87.57.57:22        4:4  4236m 86190  100K   52M     0     0   217  * 192.168.103.254:5840
tcp  I 192.168.103.254:5261 213.187.179.198:22    4:4  4234m 85385  2972  956K     0     0     3  *
tcp  I 10.168.103.15:35303  213.187.179.198:22    4:4  4147m 86353 26488 5269K     0     0    21  *
tcp  I 10.168.103.15:9506   66.225.225.225:6667   4:4  3975m 86395 25552 2207K     0    72     9  *
tcp  O 213.187.179.198:9506 66.225.225.225:6667   4:4  3975m 86395 25552 2207K     0    72     9  * 10.168.103.15:9506

similar functionality in pftop is available via packages