Strange traffic graph output

KOM

Today I am seeing a steady 3 Mbps of traffic from my LAN and my DMZ going into pfSense and going nowhere. When I adjust the graph settings to see what's happening, it tells me that this traffic is coming from 255.255.255.255.

What is this phantom traffic???

TrafGraph.png_thumb

PiBa

Try viewing some traffic "tcpdump -eni <nic>" on a ssh/console perhaps write it to file with a extra parameter "-w /tmp/ghosttraffic.pcap" for loading in wireshark and further analysis.?.</nic>

KOM

Heh, I was hoping to get a hint without having to break out Wireshark. But having done it, that traffic seems to be DHCP-related. There is a ton of discovery, requests, offers and NAKs that never end.

cap1.png_thumb