Similar to ipfw rule timestamps, these timestamps internally are uint32_t snaps
of the system uptime in seconds. When exported, the timestamp is added to
boottime.tv_sec so the exported timestamp is useful as a time_t value. The
timestamp is updated each time a rule or a state associated with a rule is
matched.