pfSense

We don't use this yet, but we should in the future (See #12702) but I've noticed an inconsistency in how pf handles the hostid/creator ID.

If you manually set a host ID in the pf rules like so:

set hostid 0x12345678

Then pf outputs that value differently:

pfctl -vvss | grep creator
[...]
   id: 127ee96100000000 creatorid: 78563412 gateway: 198.51.100.1
[...]

Note the byte order is reversed, it is 0x12345678 in the ruleset but 78563412 in the state table data.

When passing an ID to pfctl to kill a state from that creator, it only accepts the reversed form:

: pfctl -k id -k 127ee96100000000/0x12345678
killed 0 states
: pfctl -k id -k 127ee96100000000/0x78563412
killed 1 states

Similarly, if you specify an ID in decimal form (set hostid 1) it comes out as 01000000 instead.