Subcategories

  • Discussions about snapshots for pfSense Plus 25.11

    18 Topics
    112 Posts
    H
    Boot verification failed for default_20240506115436. Netgate pfSense Plus was automatically rebooted back into default_20240506115436_20251112000214. @ 2025-11-12 00:05:41 Crash report begins. Anonymous machine information: amd64 16.0-CURRENT FreeBSD 16.0-CURRENT #20 plus-RELENG_25_11-n256491-a459b76736d0: Tue Oct 28 18:48:31 UTC 2025 root@pfsense-build-release-amd64-1.eng.atx.netgate.com:/var/jenkins/workspace/pfSense-Plus-snapshots-25_11-main/obj/amd64/mjYGPXLl/var/jenkins/workspace/pfSe Crash report details: No PHP errors found. Filename: /var/crash/info.0 Dump header from device: /dev/ada0p2 Architecture: amd64 Architecture Version: 4 Dump Length: 247296 Blocksize: 512 Compression: none Dumptime: 2025-11-12 00:04:41 -0500 Hostname: pfSense.localdomain Magic: FreeBSD Text Dump Version String: FreeBSD 16.0-CURRENT #0 plus-RELENG_25_11-n256495-95f1c5bfa8f0: Tue Nov 11 21:02:30 UTC 2025 root@pfsense-build-release-amd64-2.eng.atx.netgate.com:/var/jenkins/workspace/pfSense-Plus-sn Panic String: page fault Dump Parity: 1310204002 Bounds: 0 Dump Status: good Filename: /var/crash/textdump.tar.0 ddb.txt���������������������������������������������������������������������������������������������0600����0�������0�������625056������15105012551� 7110� �����������������������������������������������������������������������������������������������������ustar���root����������������������������wheel������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������db:0:kdb.enter.default> run pfs db:1:pfs> bt Tracing pid 93086 tid 100303 td 0xfffff800112c9000 kdb_enter() at kdb_enter+0x33/frame 0xfffffe00d3bb1640 panic() at panic+0x43/frame 0xfffffe00d3bb16a0 trap_pfault() at trap_pfault+0x3c9/frame 0xfffffe00d3bb16f0 calltrap() at calltrap+0x8/frame 0xfffffe00d3bb16f0 --- trap 0xc, rip = 0xffffffff81045d15, rsp = 0xfffffe00d3bb17c0, rbp = 0xfffffe00d3bb1800 --- pfi_kkif_update() at pfi_kkif_update+0x15/frame 0xfffffe00d3bb1800 pfi_kkif_update() at pfi_kkif_update+0x20a/frame 0xfffffe00d3bb1850 pfi_ifaddr_event() at pfi_ifaddr_event+0x82/frame 0xfffffe00d3bb18a0 srcaddr_change_event() at srcaddr_change_event+0xa7/frame 0xfffffe00d3bb1910 in6_update_ifa() at in6_update_ifa+0xd52/frame 0xfffffe00d3bb1a90 in6_addifaddr() at in6_addifaddr+0x7f/frame 0xfffffe00d3bb1b60 in6_control_ioctl() at in6_control_ioctl+0x7e1/frame 0xfffffe00d3bb1bd0 ifioctl() at ifioctl+0x8b0/frame 0xfffffe00d3bb1cd0 kern_ioctl() at kern_ioctl+0x255/frame 0xfffffe00d3bb1d40 sys_ioctl() at sys_ioctl+0x117/frame 0xfffffe00d3bb1e00 amd64_syscall() at amd64_syscall+0x126/frame 0xfffffe00d3bb1f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00d3bb1f30 --- syscall (54, FreeBSD ELF64, ioctl), rip = 0x823d91f8a, rsp = 0x820511e88, rbp = 0x820511f80 --- db:1:pfs> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xd232e969f628fa3 rdx 0x3f8 rbx 0x100 rsp 0xfffffe00d3bb1518 rbp 0xfffffe00d3bb1640 rsi 0xfffffe00d3bb13d0 rdi 0x4 r8 0x37625dc56d r9 0xfffff800112c9000 r10 0xfffffe00d3bb1400 r11 0xcedfc2df9afff59c r12 0 r13 0xfffff800061f67a8 r14 0xffffffff8147667e r15 0xfffff800112c9000 rip 0xffffffff80d92e33 kdb_enter+0x33 rflags 0x86 kdb_enter+0x33: movq $0,0x1b3e052(%rip) db:1:pfs> show pcpu cpuid = 3 dynamic pcpu = 0xfffffe0099144d80 curthread = 0xfffff800112c9000: pid 93086 tid 100303 critnest 1 "dhcp6c" curpcb = 0xfffff800112c9550 fpcurthread = 0xfffff800112c9000: pid 93086 "dhcp6c" idlethread = 0xfffff800057e8000: tid 100006 "idle: cpu3" self = 0xffffffff83813000 curpmap = 0xfffff8001127a358 tssp = 0xffffffff83813384 rsp0 = 0xfffffe00d3bb2000 kcr3 = 0x800000040fab54ae ucr3 = 0x800000040fab6cae scr3 = 0x40fab6cae gs32p = 0xffffffff83813404 ldt = 0xffffffff83813444 tss = 0xffffffff83813434 curvnet = 0xfffff800041f3f00 db:1:pfs> run lockinfo db:2:lockinfo> show locks No such command; use "help" to list available commands db:2:lockinfo> show alllocks No such command; use "help" to list available commands db:2:lockinfo> show lockedvnods Locked vnodes db:1:pfs> acttrace Tracing command intr pid 12 tid 100045 td 0xfffff80005808780 (CPU 2) cpustop_handler() at cpustop_handler+0x27/frame 0xfffffe001b76def0 ipi_nmi_handler() at ipi_nmi_handler+0x38/frame 0xfffffe001b76df00 nmi_handle_intr() at nmi_handle_intr+0xf/frame 0xfffffe001b76df20 nmi_calltrap() at nmi_calltrap+0x8/frame 0xfffffe001b76df20 --- trap 0x13, rip = 0xffffffff80d94792, rsp = 0xfffffe00d36de9a8, rbp = 0xfffffe00d36dea30 --- lock_delay() at lock_delay+0x12/frame 0xfffffe00d36dea30 _rm_rlock_hard() at _rm_rlock_hard+0x3aa/frame 0xfffffe00d36dea60 pf_test() at pf_test+0x1b2/frame 0xfffffe00d36ded30 pf_check_in() at pf_check_in+0x33/frame 0xfffffe00d36ded60 pfil_mbuf_in() at pfil_mbuf_in+0x38/frame 0xfffffe00d36ded90 ip_input() at ip_input+0x3a1/frame 0xfffffe00d36dedf0 swi_net() at swi_net+0x128/frame 0xfffffe00d36dee60 ithread_loop() at ithread_loop+0x239/frame 0xfffffe00d36deef0 fork_exit() at fork_exit+0x7b/frame 0xfffffe00d36def30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00d36def30 --- trap 0xb0580629, rip = 0xda0e5fc40c0785ec, rsp = 0xfe26d2b689a0ceed, rbp = 0xd7162d14f6daff0d --- Tracing command intr pid 12 tid 100046 td 0xfffff80005808000 (CPU 1) cpustop_handler() at cpustop_handler+0x27/frame 0xfffffe001b75eef0 ipi_nmi_handler() at ipi_nmi_handler+0x38/frame 0xfffffe001b75ef00 nmi_handle_intr() at nmi_handle_intr+0xf/frame 0xfffffe001b75ef20 nmi_calltrap() at nmi_calltrap+0x8/frame 0xfffffe001b75ef20 --- trap 0x13, rip = 0xffffffff80d94792, rsp = 0xfffffe00d36d99a8, rbp = 0xfffffe00d36d9a30 --- lock_delay() at lock_delay+0x12/frame 0xfffffe00d36d9a30 _rm_rlock_hard() at _rm_rlock_hard+0x3aa/frame 0xfffffe00d36d9a60 pf_test() at pf_test+0x1b2/frame 0xfffffe00d36d9d30 pf_check_in() at pf_check_in+0x33/frame 0xfffffe00d36d9d60 pfil_mbuf_in() at pfil_mbuf_in+0x38/frame 0xfffffe00d36d9d90 ip_input() at ip_input+0x3a1/frame 0xfffffe00d36d9df0 swi_net() at swi_net+0x128/frame 0xfffffe00d36d9e60 ithread_loop() at ithread_loop+0x239/frame 0xfffffe00d36d9ef0 fork_exit() at fork_exit+0x7b/frame 0xfffffe00d36d9f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00d36d9f30 --- trap 0, rip = 0, rsp = 0x80018, rbp = 0xfffff80102b7ab40 --- ??() at 0/frame 0xfffff80102b7ab40 Tracing command pfctl pid 2223 tid 100272 td 0xfffff80011247000 (CPU 0) cpustop_handler() at cpustop_handler+0x27/frame 0xffffffff8294c080 ipi_nmi_handler() at ipi_nmi_handler+0x38/frame 0xffffffff8294c090 nmi_handle_intr() at nmi_handle_intr+0xf/frame 0xffffffff8294c0b0 nmi_calltrap() at nmi_calltrap+0x8/frame 0xffffffff8294c0b0 --- trap 0x13, rip = 0x26bc57e1fff9, rsp = 0x26bc545c9f40, rbp = 0x26bc545c9f50 --- Tracing command dhcp6c pid 93086 tid 100303 td 0xfffff800112c9000 (CPU 3) kdb_enter() at kdb_enter+0x33/frame 0xfffffe00d3bb1640 panic() at panic+0x43/frame 0xfffffe00d3bb16a0 trap_pfault() at trap_pfault+0x3c9/frame 0xfffffe00d3bb16f0 calltrap() at calltrap+0x8/frame 0xfffffe00d3bb16f0 --- trap 0xc, rip = 0xffffffff81045d15, rsp = 0xfffffe00d3bb17c0, rbp = 0xfffffe00d3bb1800 --- pfi_kkif_update() at pfi_kkif_update+0x15/frame 0xfffffe00d3bb1800 pfi_kkif_update() at pfi_kkif_update+0x20a/frame 0xfffffe00d3bb1850 pfi_ifaddr_event() at pfi_ifaddr_event+0x82/frame 0xfffffe00d3bb18a0 srcaddr_change_event() at srcaddr_change_event+0xa7/frame 0xfffffe00d3bb1910 in6_update_ifa() at in6_update_ifa+0xd52/frame 0xfffffe00d3bb1a90 in6_addifaddr() at in6_addifaddr+0x7f/frame 0xfffffe00d3bb1b60 in6_control_ioctl() at in6_control_ioctl+0x7e1/frame 0xfffffe00d3bb1bd0 ifioctl() at ifioctl+0x8b0/frame 0xfffffe00d3bb1cd0 kern_ioctl() at kern_ioctl+0x255/frame 0xfffffe00d3bb1d40 sys_ioctl() at sys_ioctl+0x117/frame 0xfffffe00d3bb1e00 amd64_syscall() at amd64_syscall+0x126/frame 0xfffffe00d3bb1f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00d3bb1f30 --- syscall (54, FreeBSD ELF64, ioctl), rip = 0x823d91f8a, rsp = 0x820511e88, rbp = 0x820511f80 --- db:1:pfs> ps If you need more I can upload the file since it's quite long.
  • SysLog Data - Anyone have data they could provide for testing

    2
    0 Votes
    2 Posts
    717 Views
    K
    Looking for syslogs with external host data (i.e. public internet facing) I have internal network logs and can collect without an issue.
  • HOWTO: compile kernel with LISP support

    3
    0 Votes
    3 Posts
    3k Views
    dragoangelD
    This topic has been readen 1177 times. It means that many people interested in this technology, really good thing to drop NPt away in IPv6 Multihoming.
  • New project: accountability software for a network (prevent porn)

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Additional OpenDNS intergration

    9
    0 Votes
    9 Posts
    2k Views
    BBcan177B
    @huzbub: Can PFBlockerNG DNSBL be used in conjunction with OpenDNS?  I realize this may be a little redundant as OpenDNS does much of what PFBlocker does but I like the multiple layers of protection and additional customization of PFBlocker. I used the guide below to get OpenDNS setup and it indicates that DNS Resolver must be disabled.  And if I understand correctly the DNS Resolver is required for PFBlocker to work. https://forum.pfsense.org/index.php?topic=112288.0 DNS Resolver & Forwarder Once you completed the above process, you need to disable DNS Resolver and enable DNS Forwarder. (I am not sure if DNS Resolver can be configured with OpenDNS, I tried to configure it but no luck. With DNS Forwarder, everything work well. Maybe someone can help out to explaining it WHY) To do this, you need to go to Services > DNS Resolver > Enable: (Unchecked) After that, Go to Services > DNS Forwarder > Enable: Checked Interfaces: All Click Save Any help appreciated! The DNS Resolver (Unbound) can be enabled in Resolver or Forwarder mode. Don't confuse that with the DNS Forwarder (DNSMasq). So you can check the DNS forwarder option in the Resolver. And add the OpenDNS servers to the pfSense General tab settings to utilize both DNSBL and OpenDNS.
  • Booting Pfsense

    3
    0 Votes
    3 Posts
    996 Views
    R
    sorry i guess you didn't understood what i said. I have made a custom pfsense iso which doesnt boot so i was wondering if anyone can help with that . The iso i made is bootable , but it shows the error " cant find kernel".
  • How to create .txz in FreeBSD & transfer it to pfSense?

    15
    0 Votes
    15 Posts
    3k Views
    D
    @renato.nogueira: @doktornotor: If you do not want the webgui, just don't install it. pkg remove pfSense-pkg-squid pkg install squid sorry, the pfsense is 2.0.1 [image: giphy.gif]
  • XSD for Config.XML

    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    No, there is no formal spec or XSD.
  • Add apply button on 2.3 pkg xml framework

    1
    0 Votes
    1 Posts
    556 Views
    No one has replied
  • Block traffic when related NAT rule Alias doesn't exist

    7
    0 Votes
    7 Posts
    967 Views
    Q
    Thanks for raising Rajko and thanks for the fix devs.
  • MOVED: Found this was an interesting read, execute code on routers

    Locked
    1
    0 Votes
    1 Posts
    504 Views
    No one has replied
  • Interface names

    4
    0 Votes
    4 Posts
    2k Views
    luckman212L
    Thank you both for the helpful replies. Might not be a bad idea to add a note about that to the Developer Style Guide (e.g. Whenever possible, the preferred way to reference interfaces is by using the logical interfaces name eg opt2 yada yada…)
  • PHP error on 2.3.2 update

    4
    0 Votes
    4 Posts
    2k Views
    D
    @thallam08: Issue is still there in 2.3.3 and 2.3.3_p1 Not really, don't necropost. https://github.com/pfsense/pfsense/blob/RELENG_2_3/src/usr/local/bin/dhcpd_gather_stats.php
  • What is check_reload_status?

    6
    0 Votes
    6 Posts
    5k Views
    luckman212L
    I made a small test patch (have not submitted a PR yet because I wanted feedback first) that seems to solve the issue for me. At least in my case it was caused by Console opt 16 restart php-fpm, killing that made check_reload_status go into a nosedive.  So I wrapped it with a start/stop. Been testing that for a couple days and so far it has helped. Any thoughts? Side note: since it doesn't seem possible to build a "pfSense" platform from source, what is the recommended method for trying to make & test changes to check_reload_status.c in case it needs to be worked on? edit: didn't get any comments here so I submitted PR#3637
  • SSH GitSync

    1
    0 Votes
    1 Posts
    696 Views
    No one has replied
  • Why won't pfsense 2.3.3 build nonSense out of the box

    2
    0 Votes
    2 Posts
    710 Views
    D
    I think it's fairly obvious that it's broken on purpose and you won't get any assistance from pfSense guys here, whatsoever. https://forum.pfsense.org/index.php?topic=109089.0
  • Do I still need this patch? Upgrade to 2.3.3-RELEASE broke it.

    8
    0 Votes
    8 Posts
    1k Views
    D
    Dude dunno what are you after here. There's no user-configurable stuff in there and in general nothing of user interest in there either. The file was split to one per PHP extension. There's nothing to patch, fix, add, edit or invent there. And no, there's is no easy way to look.
  • Is this plugin idea even possible?

    5
    0 Votes
    5 Posts
    1k Views
    B
    Ok so i figured out the problem. It should probably be noted in the documentation that in order for accounting to work FreeRADIUS needs an interface set to listen on port 1813 for Accounting packets. But now i have a new problem. According to the documentation to reset the counter you simply have to delete the used-octets- <username>file. Well for some reason that does not work. When it regenerates the file it simply picks up where it left off. At this point i dont think i will even use radius to handle the data caps i will just use it as a counter and handle everything with scripts. But its going to make things a lot more complicated if i cant reset the counter. Edit: Im also noticing something odd about the accounting. It seems the usage counter continues to increase at a rate of a few hundred KB per minute even when the user is no longer connected to the network. Meaning a user can login then disconnect their machine from the network and until their login session times out they will continue to use data at a relatively slow rate. That will get rather annoying if i cant figure out how to fix it… Edit2: Its worse that i thought. A user that isnt even connected to the network just used around 20MB in about 10 minutes. Thats going to make this completely unusable... Edit3: Unless im just missing something stupid i think radius accounting may just be broken on PFSense. I just tried a fresh pfsense install on a different system and its doing the exact same thing... So... Any ideas? Oh and what i said about it showing 20MB used in 10 minutes... It got worse than that. It seems a bit random but after a bit more testing i left the test user connected and went to bed. In the morning the user had been disconnected for reaching the 100GB limit set...</username>
  • Need help building module for broadcom 5719

    22
    0 Votes
    22 Posts
    8k Views
    M
    I know this is off topic. But does this device support inline IPS? Also do you know where can I get updated firmware for this device. Thanks in advance!
  • Regular expression generator

    3
    0 Votes
    3 Posts
    2k Views
    N
    My favorite is: http://php.net/manual/en/pcre.pattern.php Along with: $regex_sub_pattern_x = "something_x"; $regex_sub_pattern_y = "something_y"; $regex_sub_pattern_z = "something_z"; $regex_pattern = $sub_pattern_x . $sub_pattern_y . $sub_pattern_z;
  • Sprintf or direct assignment

    4
    0 Votes
    4 Posts
    2k Views
    N
    Kind of torn between the alternatives. Found this quote interesting.  Never thought of the opcache. http://stackoverflow.com/questions/7147305/performance-of-variable-expansion-vs-sprintf-in-php Ultimately the 1st is the fastest when considering the context of a single variable assignment which can be seen by looking at various benchmarks. Perhaps though, using the sprintf flavor of core PHP functions could allow for more extensible code and be better optimized for bytecode level caching mechanisms like opcache or apc. In other words, a particular sized application could use less code when utilizing the sprintf method. The less code you have to cache into RAM, the more RAM you have for other things or more scripts. However, this only matters if your scripts wouldn't properly fit into RAM using evaluation. Sounds like single quote (nowdocs) catenation may be fastest when only a single var.  But then there is that opcache thing and memory mentioned in the quote.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.