PFLG-768 — Inconsistent time data from PF
When the PF control daemon reads information about a closed PF state, the time is measured from the beginning of the event to the moment when the state is deleted. Thus, this time is larger than the real event time by a specific timeout. This timeout is recognised by its number and is being subtracted from the time. The list of timeout values is read at the start of the program.
This message means that the reported event time is smaller than corresponding timeout. The event duration is set to zero.