Majority of remote host chart is “Other”

[BNaCl]

In the reporting the majority of the remote host pie chart is represented as “other” which you cannot drill down. This is also an issue in the other charts as well. Ideas in how to analyze this traffic?

[workaround]

Firstly, enlarge the chart from the right corner of it. Then list the top 100 to see the other Remote Hosts. I hope
it helps.

[BNaCl]

Yeah I tried that. I guess I just have a ton of small connections. Regardless, need to be able to drill down OTHER to analyze this traffic.

[Colt45]

I just talked with support about this very issue.
This is what they told me

Please run the following commands on the console as root.
 
pkg install -fy os-sensei-agent
service senpai restart

This worked for me. It instantly updated the Zenconsole to show the correct information

[BNaCl]

Thanks for the reply. Just double checking is this syntax correct?

service senpai restart

Also you mentioned Zenconsole, are you referring to the web console? My problem is with the onboard charts. 

[Colt45]

Yes that is correct syntax.
They were both incorrect on mine. Webconsole and onboard.

[beki]

Hi BNacl,
I think the drill-down feature is not available for `Others` since it may have a large number of items.
You may try the filtering capability on Live Sessions Explorer.
https://www.zenarmor.com/docs/opnsense/reporting-analytics/live-session-explorer#search

[Colt45]

.