Hi,
I have a question about Netflow that is confusing. So I have some local machines that were originally configured with DHCP. The machines in question received IP's dynamic IP's and one of them was .240. Since that machine contained a webserver, I decided to turn off DHCP and set it to a static IP of .30. The strange thing is that the DHCP IP address of .240 is still listed in the DHCP server client list and Netflow is showing traffic on that IP. Yet if I go to the system in question, it is statically assigned .30 and .240 is nowhere to be found.
This may be normal behavior, but I am confused by it. Why wouldn't Opnsense attribute traffic originating from .30 as from .30 versus from the unused .240 address? Also, why does Opnsense show the client as active with .240 when that IP is not actually used?
I appreciate any insights that anyone can share.
TIA!
Maybe it has something to do with dhcp leases? have you tried restarting the service to renew them?
Services -> Diagnostics -> dhcpd -> restart icon