+ set -x
+ date
Fri Sep 11 03:57:04 UTC 2026
+ kldstat -n pf
kldstat: can't find file pf: No such file or directory
+ cat
+ pfctl -F all
+ pfctl -f /tmp/df3340.conf
No ALTQ support in kernel
ALTQ related functions disabled
+ pfctl -e
+ true
+ TDPID=1292
+ sleep 1
+ tcpdump -i lo0 -n -c 12 tcp port 8080
+ sleep 2
+ nc 127.0.0.1 8080
+ echo '--- states at t+2s (expect PROXY:DST):'
--- states at t+2s (expect PROXY:DST):
+ pfctl -s state
No ALTQ support in kernel
ALTQ related functions disabled
all tcp 127.0.0.1:8080 <- 127.0.0.1:2471       PROXY:DST
+ sleep 12
+ echo '--- SURVIVED t+14s (expected on patched module):'
--- SURVIVED t+14s (expected on patched module):
+ pfctl -s state
No ALTQ support in kernel
ALTQ related functions disabled
+ grep -E 'states|State'
+ pfctl -s info
No ALTQ support in kernel
ALTQ related functions disabled
State Table                          Total             Rate
+ kill 1292
+ sleep 1
+ echo '--- lo0 capture (expect spoofed RST 127.0.0.1.8080 -> client):'
--- lo0 capture (expect spoofed RST 127.0.0.1.8080 -> client):
+ cat /tmp/df3340_cap.txt
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on lo0, link-type NULL (BSD loopback), snapshot length 262144 bytes
03:57:05.213641 IP 127.0.0.1.2471 > 127.0.0.1.8080: Flags [S], seq 3015610816, win 57344, options [mss 16344,nop,wscale 5,nop,nop,sackOK,nop,nop,TS val 107166 ecr 0], length 0
03:57:05.213776 IP 127.0.0.1.8080 > 127.0.0.1.2471: Flags [S.], seq 3352585410, ack 3015610817, win 0, options [mss 16344], length 0
03:57:05.213837 IP 127.0.0.1.2471 > 127.0.0.1.8080: Flags [.], ack 1, win 57344, length 0
03:57:05.213874 IP 127.0.0.1.2471 > 127.0.0.1.8080: Flags [S], seq 1469367020, win 0, options [mss 16344], length 0
03:57:10.669609 IP 127.0.0.1.8080 > 127.0.0.1.2471: Flags [R.], seq 0, ack 1, win 0, length 0

5 packets captured
5 packets received by filter
0 packets dropped by kernel
+ echo '--- dmesg tail:'
--- dmesg tail:
+ dmesg
+ tail -5
lo0: promiscuous mode disabled
PF shutdown
lo0: promiscuous mode enabled
poll index 3 no-action 1/1 events=00000000 kevpfilt=-1/00000005
lo0: promiscuous mode disabled
+ date
Fri Sep 11 03:57:20 UTC 2026