OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • 10.0.0.1 Top remote host
« previous next »
  • Print
Pages: [1]

Author Topic: 10.0.0.1 Top remote host  (Read 2896 times)

binaryanomaly

  • Full Member
  • ***
  • Posts: 147
  • Karma: 9
    • View Profile
10.0.0.1 Top remote host
« on: June 01, 2021, 10:35:54 pm »
Why does sensei think 10.0.0.1 is the top remote host?

It's the OPNsense LAN interface IP, gateway, local DNS resolver and very obviously not a remote host?
Logged

mb

  • Hero Member
  • *****
  • Posts: 937
  • Karma: 98
    • View Profile
    • Sunny Valley Networks
Re: 10.0.0.1 Top remote host
« Reply #1 on: June 02, 2021, 01:26:23 am »
Hi @binaryanomaly

For local connections where both the originator and the destination is in your local networks, destination will be like regarded as a remote host, since in Sensei terminology one end needs to be "remote".

You can filter out these though. Just enable "Hide local connections" under Report Settings (right top corner).
Logged

binaryanomaly

  • Full Member
  • ***
  • Posts: 147
  • Karma: 9
    • View Profile
Re: 10.0.0.1 Top remote host
« Reply #2 on: June 02, 2021, 06:15:04 am »
Quote from: mb on June 02, 2021, 01:26:23 am
For local connections where both the originator and the destination is in your local networks, destination will be like regarded as a remote host, since in Sensei terminology one end needs to be "remote".

Hmm I do understand that this is the way your tool internally works. But would ague that the common understanding is the opposite and that these are NOT remote hosts by the very definition: https://datatracker.ietf.org/doc/html/rfc1918#section-3

Quote from: mb on June 02, 2021, 01:26:23 am
You can filter out these though. Just enable "Hide local connections" under Report Settings (right top corner).

Thanks, I was looking for a setting like that and couldn't find one.

(I would naturally rather have it expected in Settings -> Reportig & Data though as almost anything else reporting related is there.)
Logged

mb

  • Hero Member
  • *****
  • Posts: 937
  • Karma: 98
    • View Profile
    • Sunny Valley Networks
Re: 10.0.0.1 Top remote host
« Reply #3 on: June 02, 2021, 05:22:46 pm »
Quote from: binaryanomaly on June 02, 2021, 06:15:04 am
Thanks, I was looking for a setting like that and couldn't find one.

(I would naturally rather have it expected in Settings -> Reportig & Data though as almost anything else reporting related is there.)

You're all welcome. Got it. I guess this also makes sense. This would behave like a "default" setting?
Logged

binaryanomaly

  • Full Member
  • ***
  • Posts: 147
  • Karma: 9
    • View Profile
Re: 10.0.0.1 Top remote host
« Reply #4 on: June 02, 2021, 08:34:21 pm »
Quote from: mb on June 02, 2021, 05:22:46 pm
This would behave like a "default" setting?

I'd assume so.

For the majority of the users the (snippet of) "local" traffic is likely not of significant interest in the reports. So it can probably be disabled by default.
Logged

mb

  • Hero Member
  • *****
  • Posts: 937
  • Karma: 98
    • View Profile
    • Sunny Valley Networks
Re: 10.0.0.1 Top remote host
« Reply #5 on: June 02, 2021, 08:43:38 pm »
Got it, thanks.
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • 10.0.0.1 Top remote host
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2