Public IP addresses on LAN interface?

[flufferbot]

I just started using opnsense (21.1). I am confused about the Top Talkers tab in Reporting -> Traffic. In the screenshot below there are many public ip addresses associated with the LAN interface, which has a single private subnet on it (192.168.100.0/24). Am I misinterpreting something?

[ThuTex]

Welcome to the opnsense fanbase :)

This is (probably) due to the current filter being applied to interface, but not to the network of that interface.
That means any traffic captured coming or going over the interface gets logged.

There is now an issue on github to discuss and perhaps change this behaviour: https://github.com/opnsense/core/issues/4724