Subcategories

  • Discussions about snapshots for pfSense Plus 25.11

    18 Topics
    112 Posts
    H
    Boot verification failed for default_20240506115436. Netgate pfSense Plus was automatically rebooted back into default_20240506115436_20251112000214. @ 2025-11-12 00:05:41 Crash report begins. Anonymous machine information: amd64 16.0-CURRENT FreeBSD 16.0-CURRENT #20 plus-RELENG_25_11-n256491-a459b76736d0: Tue Oct 28 18:48:31 UTC 2025 root@pfsense-build-release-amd64-1.eng.atx.netgate.com:/var/jenkins/workspace/pfSense-Plus-snapshots-25_11-main/obj/amd64/mjYGPXLl/var/jenkins/workspace/pfSe Crash report details: No PHP errors found. Filename: /var/crash/info.0 Dump header from device: /dev/ada0p2 Architecture: amd64 Architecture Version: 4 Dump Length: 247296 Blocksize: 512 Compression: none Dumptime: 2025-11-12 00:04:41 -0500 Hostname: pfSense.localdomain Magic: FreeBSD Text Dump Version String: FreeBSD 16.0-CURRENT #0 plus-RELENG_25_11-n256495-95f1c5bfa8f0: Tue Nov 11 21:02:30 UTC 2025 root@pfsense-build-release-amd64-2.eng.atx.netgate.com:/var/jenkins/workspace/pfSense-Plus-sn Panic String: page fault Dump Parity: 1310204002 Bounds: 0 Dump Status: good Filename: /var/crash/textdump.tar.0 ddb.txt���������������������������������������������������������������������������������������������0600����0�������0�������625056������15105012551� 7110� �����������������������������������������������������������������������������������������������������ustar���root����������������������������wheel������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������db:0:kdb.enter.default> run pfs db:1:pfs> bt Tracing pid 93086 tid 100303 td 0xfffff800112c9000 kdb_enter() at kdb_enter+0x33/frame 0xfffffe00d3bb1640 panic() at panic+0x43/frame 0xfffffe00d3bb16a0 trap_pfault() at trap_pfault+0x3c9/frame 0xfffffe00d3bb16f0 calltrap() at calltrap+0x8/frame 0xfffffe00d3bb16f0 --- trap 0xc, rip = 0xffffffff81045d15, rsp = 0xfffffe00d3bb17c0, rbp = 0xfffffe00d3bb1800 --- pfi_kkif_update() at pfi_kkif_update+0x15/frame 0xfffffe00d3bb1800 pfi_kkif_update() at pfi_kkif_update+0x20a/frame 0xfffffe00d3bb1850 pfi_ifaddr_event() at pfi_ifaddr_event+0x82/frame 0xfffffe00d3bb18a0 srcaddr_change_event() at srcaddr_change_event+0xa7/frame 0xfffffe00d3bb1910 in6_update_ifa() at in6_update_ifa+0xd52/frame 0xfffffe00d3bb1a90 in6_addifaddr() at in6_addifaddr+0x7f/frame 0xfffffe00d3bb1b60 in6_control_ioctl() at in6_control_ioctl+0x7e1/frame 0xfffffe00d3bb1bd0 ifioctl() at ifioctl+0x8b0/frame 0xfffffe00d3bb1cd0 kern_ioctl() at kern_ioctl+0x255/frame 0xfffffe00d3bb1d40 sys_ioctl() at sys_ioctl+0x117/frame 0xfffffe00d3bb1e00 amd64_syscall() at amd64_syscall+0x126/frame 0xfffffe00d3bb1f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00d3bb1f30 --- syscall (54, FreeBSD ELF64, ioctl), rip = 0x823d91f8a, rsp = 0x820511e88, rbp = 0x820511f80 --- db:1:pfs> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xd232e969f628fa3 rdx 0x3f8 rbx 0x100 rsp 0xfffffe00d3bb1518 rbp 0xfffffe00d3bb1640 rsi 0xfffffe00d3bb13d0 rdi 0x4 r8 0x37625dc56d r9 0xfffff800112c9000 r10 0xfffffe00d3bb1400 r11 0xcedfc2df9afff59c r12 0 r13 0xfffff800061f67a8 r14 0xffffffff8147667e r15 0xfffff800112c9000 rip 0xffffffff80d92e33 kdb_enter+0x33 rflags 0x86 kdb_enter+0x33: movq $0,0x1b3e052(%rip) db:1:pfs> show pcpu cpuid = 3 dynamic pcpu = 0xfffffe0099144d80 curthread = 0xfffff800112c9000: pid 93086 tid 100303 critnest 1 "dhcp6c" curpcb = 0xfffff800112c9550 fpcurthread = 0xfffff800112c9000: pid 93086 "dhcp6c" idlethread = 0xfffff800057e8000: tid 100006 "idle: cpu3" self = 0xffffffff83813000 curpmap = 0xfffff8001127a358 tssp = 0xffffffff83813384 rsp0 = 0xfffffe00d3bb2000 kcr3 = 0x800000040fab54ae ucr3 = 0x800000040fab6cae scr3 = 0x40fab6cae gs32p = 0xffffffff83813404 ldt = 0xffffffff83813444 tss = 0xffffffff83813434 curvnet = 0xfffff800041f3f00 db:1:pfs> run lockinfo db:2:lockinfo> show locks No such command; use "help" to list available commands db:2:lockinfo> show alllocks No such command; use "help" to list available commands db:2:lockinfo> show lockedvnods Locked vnodes db:1:pfs> acttrace Tracing command intr pid 12 tid 100045 td 0xfffff80005808780 (CPU 2) cpustop_handler() at cpustop_handler+0x27/frame 0xfffffe001b76def0 ipi_nmi_handler() at ipi_nmi_handler+0x38/frame 0xfffffe001b76df00 nmi_handle_intr() at nmi_handle_intr+0xf/frame 0xfffffe001b76df20 nmi_calltrap() at nmi_calltrap+0x8/frame 0xfffffe001b76df20 --- trap 0x13, rip = 0xffffffff80d94792, rsp = 0xfffffe00d36de9a8, rbp = 0xfffffe00d36dea30 --- lock_delay() at lock_delay+0x12/frame 0xfffffe00d36dea30 _rm_rlock_hard() at _rm_rlock_hard+0x3aa/frame 0xfffffe00d36dea60 pf_test() at pf_test+0x1b2/frame 0xfffffe00d36ded30 pf_check_in() at pf_check_in+0x33/frame 0xfffffe00d36ded60 pfil_mbuf_in() at pfil_mbuf_in+0x38/frame 0xfffffe00d36ded90 ip_input() at ip_input+0x3a1/frame 0xfffffe00d36dedf0 swi_net() at swi_net+0x128/frame 0xfffffe00d36dee60 ithread_loop() at ithread_loop+0x239/frame 0xfffffe00d36deef0 fork_exit() at fork_exit+0x7b/frame 0xfffffe00d36def30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00d36def30 --- trap 0xb0580629, rip = 0xda0e5fc40c0785ec, rsp = 0xfe26d2b689a0ceed, rbp = 0xd7162d14f6daff0d --- Tracing command intr pid 12 tid 100046 td 0xfffff80005808000 (CPU 1) cpustop_handler() at cpustop_handler+0x27/frame 0xfffffe001b75eef0 ipi_nmi_handler() at ipi_nmi_handler+0x38/frame 0xfffffe001b75ef00 nmi_handle_intr() at nmi_handle_intr+0xf/frame 0xfffffe001b75ef20 nmi_calltrap() at nmi_calltrap+0x8/frame 0xfffffe001b75ef20 --- trap 0x13, rip = 0xffffffff80d94792, rsp = 0xfffffe00d36d99a8, rbp = 0xfffffe00d36d9a30 --- lock_delay() at lock_delay+0x12/frame 0xfffffe00d36d9a30 _rm_rlock_hard() at _rm_rlock_hard+0x3aa/frame 0xfffffe00d36d9a60 pf_test() at pf_test+0x1b2/frame 0xfffffe00d36d9d30 pf_check_in() at pf_check_in+0x33/frame 0xfffffe00d36d9d60 pfil_mbuf_in() at pfil_mbuf_in+0x38/frame 0xfffffe00d36d9d90 ip_input() at ip_input+0x3a1/frame 0xfffffe00d36d9df0 swi_net() at swi_net+0x128/frame 0xfffffe00d36d9e60 ithread_loop() at ithread_loop+0x239/frame 0xfffffe00d36d9ef0 fork_exit() at fork_exit+0x7b/frame 0xfffffe00d36d9f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00d36d9f30 --- trap 0, rip = 0, rsp = 0x80018, rbp = 0xfffff80102b7ab40 --- ??() at 0/frame 0xfffff80102b7ab40 Tracing command pfctl pid 2223 tid 100272 td 0xfffff80011247000 (CPU 0) cpustop_handler() at cpustop_handler+0x27/frame 0xffffffff8294c080 ipi_nmi_handler() at ipi_nmi_handler+0x38/frame 0xffffffff8294c090 nmi_handle_intr() at nmi_handle_intr+0xf/frame 0xffffffff8294c0b0 nmi_calltrap() at nmi_calltrap+0x8/frame 0xffffffff8294c0b0 --- trap 0x13, rip = 0x26bc57e1fff9, rsp = 0x26bc545c9f40, rbp = 0x26bc545c9f50 --- Tracing command dhcp6c pid 93086 tid 100303 td 0xfffff800112c9000 (CPU 3) kdb_enter() at kdb_enter+0x33/frame 0xfffffe00d3bb1640 panic() at panic+0x43/frame 0xfffffe00d3bb16a0 trap_pfault() at trap_pfault+0x3c9/frame 0xfffffe00d3bb16f0 calltrap() at calltrap+0x8/frame 0xfffffe00d3bb16f0 --- trap 0xc, rip = 0xffffffff81045d15, rsp = 0xfffffe00d3bb17c0, rbp = 0xfffffe00d3bb1800 --- pfi_kkif_update() at pfi_kkif_update+0x15/frame 0xfffffe00d3bb1800 pfi_kkif_update() at pfi_kkif_update+0x20a/frame 0xfffffe00d3bb1850 pfi_ifaddr_event() at pfi_ifaddr_event+0x82/frame 0xfffffe00d3bb18a0 srcaddr_change_event() at srcaddr_change_event+0xa7/frame 0xfffffe00d3bb1910 in6_update_ifa() at in6_update_ifa+0xd52/frame 0xfffffe00d3bb1a90 in6_addifaddr() at in6_addifaddr+0x7f/frame 0xfffffe00d3bb1b60 in6_control_ioctl() at in6_control_ioctl+0x7e1/frame 0xfffffe00d3bb1bd0 ifioctl() at ifioctl+0x8b0/frame 0xfffffe00d3bb1cd0 kern_ioctl() at kern_ioctl+0x255/frame 0xfffffe00d3bb1d40 sys_ioctl() at sys_ioctl+0x117/frame 0xfffffe00d3bb1e00 amd64_syscall() at amd64_syscall+0x126/frame 0xfffffe00d3bb1f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00d3bb1f30 --- syscall (54, FreeBSD ELF64, ioctl), rip = 0x823d91f8a, rsp = 0x820511e88, rbp = 0x820511f80 --- db:1:pfs> ps If you need more I can upload the file since it's quite long.
  • Languages used in pfsense

    7
    0 Votes
    7 Posts
    5k Views
    S
    Thanks for the reply, Why choose Python? Thanks
  • How useful will the new dummynet AQMs be to ALTQ users?

    1
    0 Votes
    1 Posts
    971 Views
    No one has replied
  • PHP coding standard

    16
    0 Votes
    16 Posts
    4k Views
    P
    What should the standard be for tabbing in parameters on function calls that span multiple lines? i.e. when stringing the function name and all the parameters in one line makes the line "too long". e.g. Try to "line up" the additional parameters under the first parameter. a) By putting enough TAB and space characters assuming that each TAB is being displayed at 4-space intervals in some editor: TAB do_stuff($parameter1, TAB TAB TAB space "Second parameter is some literal text", TAB TAB TAB space $parameter3); b) By putting enough TAB and space characters assuming that each TAB is being displayed at 8-space intervals in some editor: TAB do_stuff($parameter1, TAB TAB space "Second parameter is some literal text", TAB TAB space $parameter3); c) By putting TAB characters to the function name then space characters to fill out under the function name: This avoids any assumption about the editor TAB display mode. TAB do_stuff($parameter1, TAB 9space "Second parameter is some literal text", TAB 9space $parameter3); Forget about lining up under the parameter on the first line, always indent subsequent lines by 1 TAB: TAB do_stuff($parameter1, TAB TAB "Second parameter is some literal text", TAB TAB $parameter3); Put the function name on a line by itself and all the parameters on later lines, always indented by 1 TAB: TAB do_stuff( TAB TAB $parameter1, TAB TAB "Second parameter is some literal text", TAB TAB $parameter3); and if one of the parameters has some really long literal stuff, like long text, then extra lines that continue the same parameter are indented an extra TAB: TAB do_stuff( TAB TAB $parameter1, TAB TAB gettext("Second parameter is some literal text that goes on and on and has line breaks.") . ' ' . TAB TAB TAB gettext("There is a lot to explain to the user.") . " " . TAB TAB TAB gettext("So we need to concatenate a lot of text together into a single parameter."), TAB TAB $parameter3); TAB do_stuff( TAB TAB $parameter1, TAB TAB gettext("Second parameter is some literal text that goes on and on and has line breaks.") . ' ' . TAB TAB TAB gettext( TAB TAB TAB TAB "There is a lot to explain to the user. " . TAB TAB TAB TAB TAB "So we need to concatenate a lot of text together into a single parameter. " . TAB TAB TAB TAB TAB "And sometimes the parameters passed are themselves a function that spans multiple lines."), TAB TAB $parameter3); The code currently uses various ways to do it, and it would be nice if there was a standard so that there does not need to a banter about it with each pull request! Personally I like (3)+(4).
  • RFC 4638 client support (PPPoE MTU > 1492) - testing

    35
    0 Votes
    35 Posts
    15k Views
    M
    2.3 is now BETA! Removed RFC 4638 patch. Updated to pfSense from 2.3.a to 2.3-BETA (amd64) built on Tue Jan 05 13:19:26 CST 2016 FreeBSD 10.2-STABLE Refetched and applied PPP IPv6 fix and rebooted. MTU=1500 en instant IPv6 access. Looking good, have to wait if stable. edit: Please go ahead for pull request! Your effort paid off, thank you so much David_W!
  • Steps to recompile kernel for pfsense 2.2.5

    5
    0 Votes
    5 Posts
    5k Views
    D
    The correct way is to use the build scripts in the RELENG_2_2 branch of the pfsense-tools repository. The instructions thread will likely help, though note that access to the pfsense-tools repository is now granted on github using the github user name you provided on the portal. There is no way to build a working pfSense 2.2 kernel without pfsense-tools, as the kernel patches are contained in this repository. I know this repository is deprecated, but this deprecation only applies from pfSense 2.3 (still not yet beta) onwards. Your build environment needs to be FreeBSD 10.1 of the appropriate architecture (amd64 or i386).
  • Form Input Width Granularity

    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    Is this for 2.3? If so it belongs on the 2.3 board.
  • Checkbox Display as Radio Duplicate ID Error

    1
    0 Votes
    1 Posts
    783 Views
    No one has replied
  • Sample Logs for Dev/Test

    1
    0 Votes
    1 Posts
    769 Views
    No one has replied
  • Dev Shell

    6
    0 Votes
    6 Posts
    2k Views
    D
    I think it used to auto-exit for a reason. The relevant stuff appears to be in /etc/phpshellsessions/gitsync in case someone's bored.
  • [solved] 'Trick' (patch) Captive Portal into using LDAP User backend

    4
    0 Votes
    4 Posts
    2k Views
    F
    From https://redmine.pfsense.org/issues/5112 : With some help from PiBa-NL via IRC I can confirm that the hackish approach works fine. $authcfg = auth_get_authserver("YOUR LDAP BACKEND NAME"); $_attributes = array(); $loginok = authenticate_user($_POST['auth_user'], $_POST['auth_pass'], $authcfg, $_attributes); I then uncommented the privilege checking. I hope I find the time to layout changes in a github PR and would like some guidance on how the new configuration options should be structured. It can get complicated if one wishes, but there I will not help much. I thus consider this thread to be closed, but are happy to find collaborators for a github PR (join me on https://redmine.pfsense.org/issues/5112 ). Thanks.
  • Testing Request: LDAP/AD Authentication

    2
    0 Votes
    2 Posts
    3k Views
    F
    That sounds a lot like RFC2307bis authentication as in https://redmine.pfsense.org/issues/5461 .
  • Packages doing crazy things (sysctls, /boot/loader.conf mods)

    2
    0 Votes
    2 Posts
    1k Views
    J
    obviously(?) sysctl needs an API, so we can ensure it occurs correctly, and perhaps within some limit.
  • Use Network Aliases in OpenVPN configuration too?

    2
    0 Votes
    2 Posts
    1k Views
    P
    https://redmine.pfsense.org/issues/2668 I thought about this a long time ago and never did anything about it! Someone (me?) should look at it again when the 2.3 code is stable.
  • Packet Fence evaluations

    5
    0 Votes
    5 Posts
    3k Views
    D
    Apparently…
  • Dhcpd rrd graph

    6
    0 Votes
    6 Posts
    2k Views
    H
    new version with additional info: [image: ifblhv.png]
  • Firewall Log Display Descriptions Performance

    10
    0 Votes
    10 Posts
    2k Views
    N
    What would be the implications of eliminating table "persist file" lines from the pfctl -vvPnf input in these two /etc/inc/filter_log.inc functions? function find_rule_by_number($rulenum, $trackernum, $type="block") { function buffer_rules_load() { grep -v "persist file" /tmp/rules.debug | /sbin/pfctl -vvPnf - Speeds it right up.
  • Aliases & logical object representation

    2
    0 Votes
    2 Posts
    1k Views
    P
    I don't understand what you need that is not there already. In the current 2.2.* you can: a) Put and alias as an entry inside another alias - that lets you define a device(s) once in a small alias and then include that alias in higher-level aliases. b) In the Firewall Rules GUI you select source or destination address "single host or alias" and start typing the start of the alias name you want, and choose it. And similar thing in the source/destination ports.
  • NanoBSD Image Block Alignment [MisAlignment]

    42
    0 Votes
    42 Posts
    16k Views
    H
    @ky41083: Does it worry anybody else that pfSense dev's accept code commits from this "genius"? nope.
  • How to build pbi packages for pfSense?

    11
    0 Votes
    11 Posts
    4k Views
    T
    David, thanks for the insight. I already have my 2.3 VM up and running and will try to patch things for varnish4 in there.
  • Xml_safe_fieldname

    3
    0 Votes
    3 Posts
    1k Views
    D
    The reason is to confuse the enemy… :D As I understand it, this is only used for package name itself?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.