Traffic Reporting shows triple traffic in vs traffic out for LAN bridge

[Shady Dave]

Hello!

I started monitoring the reported traffic on 24.1.4 and noticed that the traffic reporting always shows approximately 3x traffic in to 1x traffic out when reporting for my LAN interface, which is a bridge.

For example, I'll be streaming from a security camera, which goes across the bridge. 6 Mbit stream, the traffic graph shows 18 Mbit in (LAN) and 6 Mbit out (LAN). [See camtraffic.jpg]

If I upload to google drive, it shows 1.5Gbit in (LAN) and 500Mbit out (WAN). [See uploadtraffic.jpg]

Downloading from the internet shows 1:1 traffic in (WAN) to out (LAN).

If I change the traffic graph to show the explicit hardware interfaces being used, traffic is correctly shown as 1:1 in:out. [See hardwareinterfacetraffic.jpg]

I have RSTP enabled and configured as correctly as far as I can tell, so I do not believe it to be a routing loop (especially since the hardware interfaces are showing appropriate 1:1 in:out traffic).

Is this potentially some kind of bug in the traffic reporting for a bridge interface? Or is there some configuration that may affect this I need to tamper with?

Note: I can't seem to figure out how to embed attached images, sorry!

[Moonshine]

Just to say I've seen issues with the traffic reporting as well.  Basically host traffic is being shown/reported at 1/2 the actual rate. I have an issue opened at Github here https://github.com/opnsense/core/issues/7421. 

It seems odd there aren't more reports -- assuming I'm not missing something. :)   I guess it's just not used much. ¯\(ツ)/¯

[Patrick M. Hausen]

The traffic goes out all the bridge member ports, so the counter is multiplied by the number of ports.