CONNDB_ISFORW_P
*flow = CONNDB_ISFORW_P(val) ? NPF_FLOW_FORW : NPF_FLOW_BACK;
KASSERT(!CONNDB_ISFORW_P(con));