I'm trying to understand why my cs-firewall bouncer on my opnsense is not reporting correctly to the console. When I look at the detail of "Unknown Behavior" I can see "Attacker's intent cannot be detected with your remediation component (bouncer) configuration." but I've found pretty much nothing in the docs regarding this kind of problem, I see a lot of prevented attacks but it looks like the classification or category data of why it's been blocked doesn't work. Does someone have any idea where I should look ? My bouncer config looks good as far as I can tell..
Thanks!