• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Netgate 6100 Storage

Scheduled Pinned Locked Moved Official Netgate® Hardware
22 Posts 7 Posters 4.6k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    stephenw10 Netgate Administrator
    last edited by Oct 5, 2021, 11:02 PM

    I would guess it's Suricata of the possible suspects there.

    Make sure you have a total log folder size restriction set in the Suricata log management settings.

    Though if it just shows /var/log you might just have a lot of system logging enabled.
    Try: ls -ls /var/log
    What's using the space?

    Steve

    1 1 Reply Last reply Oct 6, 2021, 3:42 AM Reply Quote 0
    • 1
      1amt0ny @stephenw10
      last edited by Oct 6, 2021, 3:42 AM

      @stephenw10 yeah it's suricata, that makes now cuz every time I try starting the block mode the pfsense crashes within a minute.

      G 1 Reply Last reply Oct 6, 2021, 7:29 AM Reply Quote 0
      • G
        Gertjan @1amt0ny
        last edited by Oct 6, 2021, 7:29 AM

        @1amt0ny

        Suricata, (ntop, snort and the like) log a lot and ones activated should be observed all the time.
        Remember : the more 'hits' come in, the more logs lines are added.
        The 'blocking' option is just a switch between : inject firewall rules, or not.

        Suricate and "disk full" is a very known subject on this forum. See here, as this is a package you can't just install and run away from it.

        I'm not using Suricata myself.
        From what I know, Suricata has log file maintenance like roll over and file pruning build in.
        It's setup should be checked.

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 1 Reply Last reply Oct 7, 2021, 6:26 AM Reply Quote 1
        • B
          bigsy @stephenw10
          last edited by Oct 6, 2021, 9:21 AM

          @stephenw10 From the video link, drives have to be B+M keyed.

          S 1 Reply Last reply Oct 6, 2021, 11:41 AM Reply Quote 0
          • S
            stephenw10 Netgate Administrator @bigsy
            last edited by Oct 6, 2021, 11:41 AM

            @bigsy Sorry, yes I corrected my post.
            The slots are B-Keyed so the drives have to be too. But I've yet to see a B-Key only NVMe drive they are mostly M-Key only (which won't fit) with far fewer being B+M-Key (which will).

            Steve

            1 Reply Last reply Reply Quote 0
            • N
              NOCling
              last edited by Oct 6, 2021, 4:09 PM

              Is the M.2 with SATA support to fit a default B-Key SATA SSD?

              Netgate 6100 & Netgate 2100

              1 Reply Last reply Reply Quote 0
              • S
                stephenw10 Netgate Administrator
                last edited by Oct 6, 2021, 6:19 PM

                There is no SATA support on the 6100. The slots are NVMe only.

                Steve

                1 Reply Last reply Reply Quote 1
                • 1
                  1amt0ny @Gertjan
                  last edited by 1amt0ny Oct 7, 2021, 6:26 AM Oct 7, 2021, 6:26 AM

                  @gertjan So I see there's an option in Suricata Logs Mgmt to set a "Log Directory Size Limit", is that all I have to do to prevent it overflooding the disk space?

                  G 1 Reply Last reply Oct 7, 2021, 7:45 AM Reply Quote 0
                  • G
                    Gertjan @1amt0ny
                    last edited by Oct 7, 2021, 7:45 AM

                    @1amt0ny
                    Yep.
                    Without the space management, Suricata will fill out all the space is can find, using the entire partition or disk.
                    Still, this is not a set-it-and-forget-it-option. Check remaining space regularly.

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    S 1 Reply Last reply Oct 7, 2021, 2:10 PM Reply Quote 1
                    • S
                      SteveITS Galactic Empire @Gertjan
                      last edited by Oct 7, 2021, 2:10 PM

                      @gertjan said in Netgate 6100 Storage:

                      Check remaining space regularly

                      Though disk space shows on the dashboard, it might be handy if there was an alert/email notification for "disk 95% full" or whatever. (I don't think there is?)

                      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                      Upvote 👍 helpful posts!

                      1 1 Reply Last reply Oct 7, 2021, 4:48 PM Reply Quote 0
                      • 1
                        1amt0ny @SteveITS
                        last edited by Oct 7, 2021, 4:48 PM

                        @steveits there isn't for me. Maybe it can have? I just don't know how to set it up.

                        1 Reply Last reply Reply Quote 0
                        • S
                          stephenw10 Netgate Administrator
                          last edited by Oct 7, 2021, 8:04 PM

                          There's no option for that currently. There are a number of open feature requests for it. THis probably closest currently: https://redmine.pfsense.org/issues/9226
                          You can add comments there.

                          There is a new disk information widget you may have seen in current snapshots too. That has some functionality with a percentage level.

                          Steve

                          G 1 Reply Last reply Oct 8, 2021, 7:32 AM Reply Quote 0
                          • G
                            Gertjan @stephenw10
                            last edited by Oct 8, 2021, 7:32 AM

                            Some tips here : Suricata Logs grow over limitation

                            No "help me" PM's please. Use the forum, the community will thank you.
                            Edit : and where are the logs ??

                            1 Reply Last reply Reply Quote 0
                            • L
                              Lichtlos @1amt0ny
                              last edited by Dec 2, 2021, 8:34 PM

                              @1amt0ny hi did you manage to find a compatible drive?

                              1 1 Reply Last reply Dec 3, 2021, 7:12 PM Reply Quote 0
                              • J jimp moved this topic from Hardware on Dec 2, 2021, 8:38 PM
                              • 1
                                1amt0ny @Lichtlos
                                last edited by Dec 3, 2021, 7:12 PM

                                @lichtlos Well for me the best strategy is to set the log limit on the netgate and use remote syslog server to store the files. As the official release video stated, the netgate 6100 box has reserved storage ports for their upcoming compatible drive, so the best thing is to wait I guess.

                                L 1 Reply Last reply Dec 6, 2021, 7:53 PM Reply Quote 0
                                • L
                                  Lichtlos @1amt0ny
                                  last edited by Dec 6, 2021, 7:53 PM

                                  @1amt0ny can confirm the WD SN520 NVMe SSD - 256 GB works perfectly fine in my box. Set it up with ZFS as explained in https://forum.netgate.com/topic/168038/proper-steps-for-zfs-pave-re-install-on-6100

                                  1 Reply Last reply Reply Quote 5
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                    [[user:consent.lead]]
                                    [[user:consent.not_received]]