pfflowd is a small daemon which converts real-time state expiry messages from OpenBSD's PF packet filter into Cisco NetFlow datagrams. This allows very fine- grained traffic accounting in conjunction with NetFlow capable tools and places almost no incremental load on a PF firewall.
pflogx is a simple tool that exports OpenBSD packet filter logs to XML files. It reads a binary log file generated by the pf logging daemon (pflogd) and generates a human-readable and exploitable XML file. Using an XSLT processor you can convert this XML file to any other format, such as HTML, CSV, or SQL.
pks-commands.php3 allows your Web server to search and add PGP/GPG keys from the public keys out there. It takes the TCP 11371 port connection and does it all on the web server. It is good in environments where the client machines are unable to get to arbitrary TCP ports (such as behind tightened firewalls).
plugdaemon is a load-balancing "plug" proxy. It allows you to forward TCP connections to one or multiple hosts, using load balancing or failover, and to route the connections through an HTTPS proxy. Access control is done by source interface or by originating IP. Outgoing connections can be bound to a specific IP address.
proxymin is an easy-to-use graphical interface to configure commonly needed Squid ACLs. It allows for fine grained permission management based on users, hosts, and groups. The HTTP, HTTPS, and FTP protocols are currently supported. proxymin has been tested with several hundreds of managed accounts. All major features have been implemented and tested.
pynetfilter_conntrack is a Python binding for libnetfilter_conntrack that allows you to manipulate Netfilter's stateful inspection objects. This makes it possible to easily close connections and obtain information about connections such as the number of packets and bytes. It could be used to create conntrack entries, replacing heavy kernel modules for complex protocols such as FTP and H323.