PFSync traffic in netflow reported on WAN

Started by bimbar, September 10, 2021, 06:02:30 PM

Previous topic - Next topic
September 10, 2021, 06:02:30 PM Last Edit: September 10, 2021, 06:04:09 PM by bimbar
Weirdly, reporting reports almost no traffic on my pfsync interface, but reports protocol pfsync and destination ip 224.0.0.240 traffic on WAN.
Now if I tcpdump on both of those, the pfsync traffic clearly uses the right interface.

I don't think the interface order is switched, because apart from that, both interfaces reports look more or less recognizable.

Any ideas?