pfSense bridge doubles traffic?

I setup a pfSense VM where there is a physical Intel NIC as an interface, and I made a bridge interface so that other VMs can connect to. This Intel NIC is then receiving a spanner output from a switch.

Why is the pfSense graphs showing that the bridge is doubling the Intel NIC spanner input vs. being the same?
image

Probably copying all traffic to the bridge?

1 Like

Then wouldn’t it be shown in orange as blue is input and orange output?

I finally got the ingest into a stream tool and will setup targeted pcaps so that i can see if its deplicating soon.

1 Like