Strange traffic graph output
-
Today I am seeing a steady 3 Mbps of traffic from my LAN and my DMZ going into pfSense and going nowhere. When I adjust the graph settings to see what's happening, it tells me that this traffic is coming from 255.255.255.255.
What is this phantom traffic???
-
Try viewing some traffic "tcpdump -eni <nic>" on a ssh/console perhaps write it to file with a extra parameter "-w /tmp/ghosttraffic.pcap" for loading in wireshark and further analysis.?.</nic>
-
Heh, I was hoping to get a hint without having to break out Wireshark. But having done it, that traffic seems to be DHCP-related. There is a ton of discovery, requests, offers and NAKs that never end.