If it's something in pfSense it will almost certainly be logging something when the problem starts. It could be a link state change. But it could be a route or IP address change. Or if you're running something dynamic like Snort or pfBlocker it might be related to a list update for example.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.