ipfw_dump_states
int ipfw_dump_states(struct ip_fw_chain *chain, struct sockopt_data *sd);
error = ipfw_dump_states(chain, sd);