pf_get_timestamp
nlattr_add_u64(nw, PF_RT_TIMESTAMP, pf_get_timestamp(rule));
nvlist_add_number(nvl, "timestamp", pf_get_timestamp(krule));
nvlist_add_number(nvl, "timestamp", pf_get_timestamp(rule));