drop pfsense filterlog export · parse rule number + interface + action · runs locally
drop pfsense filterlog export · local only
heuristic screener · vendor schema varies · not definitive proof