Hmm, this bug was supposed to have been fixed:

http://redmine.pfsense.org/issues/show/16

@cog_engr:

Actually, that's an OK answer for me – is it safe to say that from a functionality standpoint, sticky connections are the same in 1.2.3rc3 as in 1.2.1?

Same as it's always been.

Does anyone know how to get the ath driver to stop spamming the log with entries like this:

Nov 18 07:52:44 gateway hostapd: ath0: STA 00:11:d9:17:bf:37 WPA: group key handshake completed (WPA)

I have the exact some only and issue with VIA boxes. Guess need to find a keyboard and mouse then to try and diag.

mass use of p2p was problem there. many connections per sec.
question: p2p option set in traffic shaper is low. how pf knows what is p2p by use of specific ports? l put rb750 mikrotik behind pf, and killed p2p.
i am now using agressive mode for firewall in pf.

Thanks; after I posted this I saw I was still on the OCT5 snapeshoot. I'll have to take some downtime on saturday to upgrade my install.

@dadaniel:

@jimp:

Each time a builder run is completed, it's just for one image size. The next run will be for a different size. We tried to make it produce all sizes on each run, but there were some complications that led to problems

So it looks we have to wait one week or even longer to get for example the new 2gb nanobsd image.  :(
Is it possible to make a different size build also when no change has been made on that day?

I hope that's not true, but as long as the 2G update is the next one built, that should be ok.  ;D

Hello!

Many thanks for your answer.

Regards,

Josep Pujadas

I thought it was, or it isn't.

Anyhoo, unless it's a critical event and not a warning you can safely ignore the message.

We log warnings, but only act on critical events. Changing the defaults on 1.2.3 involves touching code.

Not that I'm aware of.

@wpc:

I can't get to the web configuration page.

Of course! Sorry. But glad you have it working and presumably can now use the WEB GUI to make sure it stays disabled on reboot.
Thanks for reporting back.

yes the latest snapshot works fine..

but the hardware crypto (padlock) isnt listed on the main webpage like the HiFN one is..

Yeah, I just found it in the LAN interface, and yep, that was the problem.
Thanks guys!

Hi again

On 1.2.2 i've configured ipsec vpn,traffic shapping,nat,captive portal.
I'll try with a newer build and i will report back..

thank you

I'm seeing the same thing, but without any bittorrent traffic. In my case, I think it might be UDP DNS reflection that triggers it. I'm running off CF card w/o any swap, and am getting a lot of process kills due to lack of swap (even with 512M RAM and low load), so I'm going to try rebuilding with swap space to see if this problem still exists.

example line in /var/etc/inetd.conf

19111 dgram udp nowait/0 nobody /usr/bin/nc nc -u -w 2000 192.168.1.16 53

example inetd process

root  15877  0.0  0.0  3268    8  ??  IN    9:59AM  0:00.00 inetd: wrapping (inetd)

example nc process (also hanging)

nobody 13983  0.0  0.0  3184    8  ??  Ss    9:56AM  0:00.00 nc -u -w 2000 192.168.1.16 53

lots of these in dmesg

pid 15741 (inetd), uid 0, was killed: out of swap space
pid 16286 (sh), uid 0, was killed: out of swap space
pid 16287 (sh), uid 0, was killed: out of swap space
[…]

@danswartz:

are all of the userland ftp helpers disabled?  if not, try that.

That was it, thanks. :)

Polling was disabled. Thanks for the hints, I'll do more research on the issue.