ipfwpcap(8) on FreeBSD
The text 4c3a2f87b9a7, as FreeBSD 10.0-RELEASE shipped it.
copy diverted packets to a file in tcpdump format
Flags it lists
-
-P -
-b -
-d -
-p -
-r -
-rr