I figured it out 🤦. My firewalls had an old unused OpenVPN client connection on it that was unstable and every time it reconnected, it got a new IP address causing pfsense to restart all packages, and since it took down SNMP, we wouldn't get alerted about the interface going down either...
So this issue is solved now

We lost bsnmpd on two firewalls 5 minutes apart, starting to narrow this down.

This doesn't look like the same issue as before, which was a FD leak. This looks like a straight up memory leak. Both bsnmpd's crashed in the middle of a tenable scan. Looking at another pair of our firewalls bsnmpd is taking up a boatload of memory:
10545 root 1 20 0 5446M 3015M select 4 14:12 0.03% bsnmpd
and
34784 root 1 20 0 5382M 2626M select 6 16:50 0.00% bsnmpd

So 3GB and 2.6GB ram resident. These two firewalls crashed maybe 15 days ago (when I last posted). We're also seeing the firewalls run out of swap space before the kill event, although a day or few before:

2>1 2025-04-18T14:01:06.988988-04:00 fw kernel - - - swap_pager: out of swap space
<2>1 2025-04-18T14:01:06.989098-04:00 - - - swp_pager_getswapspace(2): failed
<2>1 2025-04-19T04:00:28.371252-04:00 kernel - - - swp_pager_getswapspace(30): failed

Before the final kill
<3>1 2025-04-20T04:55:09.682953-04:00 kernel - - - pid 65139 (bsnmpd), jid 0, uid 0, was killed: failed to reclaim memory

While not fully conclusive, my guess is bsnmpd leaks memory during a tenable scan. I suppose we could prove this by kicking off a scan and looking at memory before/after. However I'm going to capture the status.php and open a support case.

@SOUK Home Assistant has an active Integration for pfSense via HACS.
https://github.com/travisghansen/hass-pfsense

It gives CPU, Memory, Leases, Disk etc.
HA_pfsense.png

What it doesn't give is in/out on an interface. I get this via snmp:

in OiD
1.3.6.1.2.1.2.2.1.10.6 where .6 is the interface number
out OiD
1.3.6.1.2.1.2.2.1.16.6 where .6 is the interface number

sensor: # read the Bytes in/out on an interface in an interval - platform: snmp name: asa5512x1_wan6_in host: 10.10.10.1 community: dom baseoid: 1.3.6.1.2.1.2.2.1.10.6 accept_errors: true version: 2c scan_interval: 20 - platform: snmp name: asa5512x1_wan6_out host: 10.10.10.1 community: dom baseoid: 1.3.6.1.2.1.2.2.1.16.6 accept_errors: true version: 2c scan_interval: 20 # calculate the gradiant of the bandwith of the asa5512x - platform: derivative source: sensor.asa5512x1_wan6_in unit_time: s unit: B name: asa5512x1_wan6_in_der - platform: derivative source: sensor.asa5512x1_wan6_out unit_time: s unit: B name: asa5512x1_wan6_out_der # calculate MBps and MiB between intervals of the asa5512x - platform: template sensors: asa5512x1_wan6_in_mbps: value_template: "{{ (states('sensor.asa5512x1_wan6_in_der')|float*8/1000000)|round(2) }}" unit_of_measurement: 'Mbps' friendly_name: Internet in Mbps asa5512x1_wan6_out_mbps: value_template: "{{ (states('sensor.asa5512x1_wan6_out_der')|float*8/1000000)|round(2) }}" unit_of_measurement: 'Mbps' friendly_name: Internet out Mbps asa5512x1_wan6_in_mib: value_template: "{{ (states('sensor.asa5512x1_wan6_in')|float/1000000)|round(2) }}" unit_of_measurement: 'MiB' friendly_name: Internet in MiB asa5512x1_wan6_out_mib: value_template: "{{ (states('sensor.asa5512x1_wan6_out')|float/1000000)|round(2) }}" unit_of_measurement: 'MiB' friendly_name: Internet out MiB asa5512x1_wan6_in_gib: value_template: "{{ (states('sensor.asa5512x1_wan6_in')|float/1000000000)|round(2) }}" unit_of_measurement: 'GiB' friendly_name: Internet in GiB asa5512x1_wan6_out_gib: value_template: "{{ (states('sensor.asa5512x1_wan6_out')|float/1000000000)|round(2) }}" unit_of_measurement: 'GiB' friendly_name: Internet out GiB

And for the totals (day/month):

utility_meter: # asa5512x1 wan usage asa5512x1_wan6_in_gib_monthly: source: sensor.asa5512x1_wan6_in_gib cycle: monthly name: Internet in monthly asa5512x1_wan6_in_gib_daily: source: sensor.asa5512x1_wan6_in_gib cycle: daily name: Internet in daily asa5512x1_wan6_out_gib_monthly: source: sensor.asa5512x1_wan6_out_gib cycle: monthly name: Internet out monthly asa5512x1_wan6_out_gib_daily: source: sensor.asa5512x1_wan6_out_gib cycle: daily name: Internet out daily

Hi
did you try snmpwalk?
Are you sure about the version?

@keyser Thanks for the pointer to the post! It's clear now that we'll have to wait until 24.08.

In the meantime, I'll set up a cron-controlled restart of bsnmpd on all monitored firewalls sigh :-)

@Roberto-Marcelino did you set the same community on pfsense snmp config and zabbix? Other than that, i think you just need to allow traffic from your zabbix to your wan interface on port 61161.
After you do those things, try to create the host on zabbix again

Hello @jimp
Do you have an idea of ​​the problem ?
Thanks in advance 👍

@PVuchetich2 I was using it in another way here on my network, but it seems that the solution will be to migrate by installing the Zabbix agent on pfSense itself. Thank you very much for your answer.

I must have posted this in the wrong section, or people really don't like answering SNMP questions. I'm looking for an answer on how to make sure a service starts on reboot. SNMP does not., Maybe it's a bug, maybe it's a configuration problem. If this is something that can only be answered by paid support, can someone please tell me that.

Larry

@opahla said in OID for Netgate 1541 PFSense:

Hi @Setarcos

I would like to confirm if there is any impact if I change configuration in root file of pfsense. If there is no impact then I would proceed right away. Thanks in advance for the reply.

I have been using the referenced configuration with my 7100 for the past three years without issue.

@jimp Thanks for replying.

I opened at matching feature request at https://redmine.pfsense.org/issues/14901. Crossing my fingers... :)

@abs0new Unfortunately, the issue of ownership of /var/db/nut will currently arise every time you reboot.

To remediate, you can either edit nut.inc, add a boot time shell script, or wait until I can fix the package.