nx_netscope_capture.nx

nx_netscope_capture.nx -- NX-NETSCOPE L-CAPTURE: the SOVEREIGN raw-wire capture front-end (the "wireshark" tap, in-ecosystem, NO tcpdump). Opens an AF_PACKET raw socket, reads frames, and feeds each to the EXISTING pure dissector nx_packet_dissect (nx_netscope_dissect.nx). Filters inbound TCP SYN (no ACK) to a chosen dest port and prints src-ip -> dst-ip:port -- so we can SEE which NAS interface/IP a public :443 connection actually lands on (answering "where does external ingress go" with a capture, not a guess). Bounded: per-recv timeout + wall-clock deadline, so it NEVER hangs. usage: nx_netscope_capture [dport=443] [seconds=90] [maxrows=200] Needs CAP_NET_RAW (run as root). license_tier: ORIGINAL