+ /*
+ * Because snoop output now happens at flush time, if we are using snoop
+ * we force an extra flush here. While this introduces some extra network
+ * traffic, we're only doing it when snoop is in effect so I think it's
+ * reasonable.
+ */
+
+ if (snoopstate) {
+ char *errstr;
+ if (netsec_flush(nsc, &errstr) != OK) {
+ sm_nerror(errstr);
+ return RP_BHST;
+ }
+ netsec_set_snoop(nsc, snoopstate);
+ }
+