This test illustrates the use of scapy to test pf.
This builds on https://reviews.freebsd.org/D12580
Here as in the other review, use RFC5737 addresses
This is too intrusive, and could screw up the host system. If you're going to do it, then put require.config allow_sysctl_side_effects in the head, and restore the old setting of net.inet.ip.forwarding during cleanup.
Is it python2 or python3?
require.progs searches through your PATH so it should be used with plain executable names. require.files does not, so it should be used with absolute paths. In this case, since ports can be installed to alternate prefixes, you should probably do require.progs scapy