I'm trying for a while to understandhow counters are working on my network interface.
I'm using a Edgerouter-X with OpenWRT 22.03.2.
My WAN interface is using eth4 directly connected to the ONT of my provider. I've got a WAN & WAN6 interface on eth4.
I don't understand how the counters are incrementing on eth4 but for sure, it doesn't reflect the real traffic.
For example, yesterday i stream a 4K movie from a streaming platform (20 to 30Mbps) and the traffic of the day was only about 1.76GB. Realtime monitoring during this session only gave me hundreds of kbps and no more while the monitoring available on my switch gave me more than 20Mbps.
What could go wrong with these counters?
I found that my behavior is linked to hardware NAT. When I deactivate it, counters are OK.
Previous OpenWRT release 21.02 was more accurate. Not sure if I missed something after the upgrade.
Yes, this is correct. The CPU can only track traffic it actually sees.