the current code doesnt detect when its filled a bulk packet so it keeps on building them, which means that it floods the tx ring on the pfsync interface rather than actually sending many packets.
the current code doesnt detect when its filled a bulk packet so it
keeps on building them, which means that it floods the tx ring on
the pfsync interface rather than actually sending many packets.

this change correctly calculates when we've filled a bulk update
packet.

many thanks to david@ for making me go chase this. ive been wondering
why the state count on my firewalls has had such a discrepency for
a long time now.

orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars