Hey
Sorry for supposedly a beginner question.
I have installed OPNsense 21.1 on the following hardware.
https://protectli.com/vault-2-port/
Everything worked out of the box.
The thing that makes me wonder is the number NON LAN addresses I see on "LAN" "Top Talkers".
Is this normal or should I be concerned?
Thanks Wim
(https://lh3.googleusercontent.com/bXEsl4cKU6d116HA8Vk36ceFrNuKSKikpoa3Y-IrFKjzYP5Ggwzlj5DNdgJa5QynTR-2cDOIkRkSSGcLfhvDPz4hD6M7anssjrJuuJDo3pYDGjcr1_bQLb7Thjm1D01ASuSVB6B6rSsvaUIomP9YxhM6hEwlpzKIpZBGssNji6T7sOdMpbVkO8rlwHWg32SHRHVsSzSdbXw0W44mPXL9tkgP459FGB28C9UgjpiaSg9YdTWB0gpNEzshJNPfxzy4wYYDR--UH0LjCKxF4Wjx7AUDOAZx4Wnbl3aA5wdeOfHHlPxLBdxxZ1Ze0V57Qs18rtfeJRbZgGPuFiJY82Cf8lrCrekbemmg-pARiKiywTLIilHxIifLr9_vJ6n281AuxwPmiWl8VNWTm4guX8I2H27tmbw9giXe0tlTI5Q1d8PXHMll-OLVTSlN3JilFbJb9niN6jhaR2Z0jfTLO-F4mQgGMXgCNYQiuKfw8qVPceNJvPvrGotyndTwe8fAEZSmp9vMQZbBRQI5FTbh2diQUQo8AjGiVqV4KDHRziMUHmhHdhkC53Va1JjAGcPBw-Aoen5VJM8ySdYMBG7VdyuobcO4uwYqdJzet5MyKxhZul4WVWIrq7_uciyioDnAnuf5xXTOxDPpTmXIUWHy-079f1kgTReKlIMu4G9ZFCuWu8aV35StxCZhv7_DSVym=w1260-h917-no?authuser=0)
A very understandable question.
This is (probably) due to the current filter being applied to interface, but not to the network of that interface.
That means any traffic captured coming or going over the interface gets logged.
There is now an issue on github to discuss and perhaps change this behaviour: https://github.com/opnsense/core/issues/4724