Seems the problem is solved now.
I restarted the service manually (and set the SF to 12 instead of 7 on the node) and now i get a 100% packets coming through. I am still wondering why this is, since running automatically at system startup some packets came through? so i guess it should not be caused by something like security rights?
Anyway, case closed 