Solved nfcapd dont working

[wolffnx]

Hi , I use this tools in the past, but never happen this

only got the initial part that is create the connector with ngctl and the interface is bloqued
this is a firewall with 2 interfaces , em0(WAN) and em1(LAN) , I want to create the conector in em1

but when create the conector

connector

mkpeer em1: netflow lower iface1
    name em1:lower netflow
    connect em1: netflow: upper out0
    mkpeer netflow: ksocket export9 inet/dgram/udp
    name netflow:export9 exporter
    msg netflow: setconfig {iface=1 conf=7}
    msg netflow:export9 connect inet/154.2.6.150:4445

running ngctl -f connector

the interface is bloqued, dont respond to anything, even to arping,and the internet access of the LAN is block of course

when I run ngctl list
I dont see anything strange

There are 3 total nodes:
  Name: ngctl3313       Type: socket          ID: 00000065   Num hooks: 0
  Name: em0             Type: ether           ID: 00000007   Num hooks: 0
  Name: em1             Type: ether           ID: 00000008   Num hooks: 0

 

[wolffnx]

anybody? some idea?

 

[wolffnx]

I found the "problem" , the listener is created at kernel level, not in userland, so..not create an standard tcp/udp open port
in the next step I can see the open port