Syncache full | Possibilities to Tshoot

[Seimus]

Hey all,

A have a bit problem with syncache getting full, which result in Zenarmor engine getting crashed.

Is there any way from OPNsense or BSD (cli) to tshoot what is causing the saturation of syncache?

I could run a capture, but as this is happening in random times/dates its very hard to schedule a capture, due to the amount of traffic I am routing.

Is there any command or logs in BSD that could show what is triggering the syncache being eating out?

Regards,
S.