Hello,A parenthesis is missing around the process number in the tcpdump output if the user's length is greater than 8 characters.
example: User length> 8 user12345 / usr / sbin / tcpdump -qlnei pflog0 . . pf: 15: 59: 54.678876 rule 194.user12345 (33415.8 / (match) pass out on vmx0: 192.168.134.44.43897> 10.18.164.41.22: tcp 0 . . ok example: user length <= 8 user1234 $ / usr / sbin / tcpdump -qlnei pflog0 . . pf: 15: 59: 54.678876 rule 194.user1234 (33415) .8 / (match) pass out on vmx0: 192.168.134.44.43897> 10.18.164.41.22: tcp 0 .Best regards.Gabriel Nieto.