Within Health, I can check "Packets" for my enabled interfaces.
Strangely, I also see Interface Groups in the "Subject" selection, but those do not work!
No packets are shown for the groups - so either this is a bug, or the bug is that Interface Groups are shown in the selection.
I can see that the timeline is different, but "Reset Zoom" does not change anything - the screenshots.
Also, when switching to "Traffic" instead of "Packets", I have one Interfaces that does NOT shown any traffic anymore - while for Packets, it can be seen. It seems like this Interface is handled like a Group.
And in Insight, I see daily packets from an Interface where the attached computer is shut down!
I cannot produce traffic, but still it get's shown:
To hunt this down, I let tcpdump run on the firewall to capture those packets - but there are no packets:
root@OPNsense:~ # ls tcpdump_igc4.out
-rw-r--r-- 1 root wheel 0 Mar 12 17:45 tcpdump_igc4.out
root@OPNsense:~ # fuser tcpdump_igc4.out
tcpdump_igc4.out: 55959w
root@OPNsense:~ # ps auxwww | grep -w 55959
root 28731 0.0 0.0 13744 2464 0 S+ 17:44 0:00.00 grep -w 55959
root 55959 0.0 0.0 21912 7952 0 SC 17:45 0:02.19 tcpdump -i igc4 -n -e -vvv -s 0 -XX -tttt
Yet... see screenshot ... the WebGUI shows them!