[SOLVED] Firewall Aliases – Function of Statistics Option

Started by wiring8228, September 19, 2026, 11:46:34 PM

Previous topic - Next topic
What does the 'Statistics' option, which has the description 'Maintain a set of counters for each table entry', actually do? Which counters is it referencing?

I can't see any change in Diagnostics > Aliases when I activate this option for an alias.
The following is the only documentation I could find about it: https://docs.opnsense.org/manual/diagnostics_firewall.html#aliases

It only counts pass matches... most of the time. I don't think I ever characterized it fully, and I've forgotten the details. How are the aliases you are testing applied?

The counter increases only for non Port based aliases.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
N355 - i226-V | AQC113C | 16G | 500G - PROD

PRXMX
N5105 - i226-V | 2x8G | 512G - NODE #1
N100 - i226-V | 16G | 1T - NODE #2

I'm using a GeoIP alias that gets used in firewall rules to only allow traffic to some countries (whitelist principle).

So, what could the Statistics option be useful for? I asked AI about it, and now I think I understand that the counters simply keep track of how many times packets were passed or blocked using the alias where the Statistics option is enabled.

Do you perhaps have a correction or a better explanation for this?

Quote from: wiring8228 on October 07, 2026, 09:53:12 PM[...] the counters simply keep track of how many times packets were passed or blocked using the alias where the Statistics option is enabled.

Exactly.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)