ipfw_state_add
s = ipfw_state_add(ctx, &args->f_id, cmd->o.opcode, rule, NULL,
s = ipfw_state_add(ctx, &args->f_id, O_LIMIT, rule, t, tcp);