Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SG1100 to 24.11 issues

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    22 Posts 6 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      michmoor LAYER 8 Rebel Alliance @stephenw10
      last edited by

      @stephenw10

      Not sure what to delete here.

      5b5b1f84-a343-4fac-99ac-c2dfa8b319be-image.png

      Firewall: NetGate,Palo Alto-VM,Juniper SRX
      Routing: Juniper, Arista, Cisco
      Switching: Juniper, Arista, Cisco
      Wireless: Unifi, Aruba IAP
      JNCIP,CCNP Enterprise

      M 1 Reply Last reply Reply Quote 0
      • M
        michmoor LAYER 8 Rebel Alliance @michmoor
        last edited by michmoor

        @michmoor

        After deleting the non default BE and running the upgrade process again i receive the following message

        5bd3c71c-3f6e-483d-a7b0-db97ca09b162-image.png

        Firewall: NetGate,Palo Alto-VM,Juniper SRX
        Routing: Juniper, Arista, Cisco
        Switching: Juniper, Arista, Cisco
        Wireless: Unifi, Aruba IAP
        JNCIP,CCNP Enterprise

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          I would try removing those large pkgs and retrying. Especially if pfBlocker has any large lists. I suspect it's exhausting the RAM.

          S M 2 Replies Last reply Reply Quote 1
          • S
            sgw @stephenw10
            last edited by

            Just for the records: had a similar issue when upgrading from the RC to the release (only 7 packages upgraded).
            Solved by removing one BE with ~1.4GB.

            now on 24.11: thanks all for your work!

            1 Reply Last reply Reply Quote 2
            • M
              michmoor LAYER 8 Rebel Alliance @stephenw10
              last edited by

              @stephenw10

              Removed pfblocker and frr but still the upgrade is failing
              Not sure what pkg-static is but that seems problematic

              2b1c9fce-bd46-4883-9407-38ec2059bc6f-image.png

              Firewall: NetGate,Palo Alto-VM,Juniper SRX
              Routing: Juniper, Arista, Cisco
              Switching: Juniper, Arista, Cisco
              Wireless: Unifi, Aruba IAP
              JNCIP,CCNP Enterprise

              M 1 Reply Last reply Reply Quote 0
              • M
                marcosm Netgate @michmoor
                last edited by

                @michmoor pkg relies on dynamic libraries provided by the system whereas pkg-static does not. Usually that message indicates the system is running out of memory. There are some situations where 2GB is required for the upgrade to succeed. My suggestion in this case would be to create a BE with everything working, uninstall all packages, update, reinstall packages. then create a new BE.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Yes, looks like it's still exhausting the RAM. How much free RAM is shown before the upgrade starts?

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    michmoor LAYER 8 Rebel Alliance @stephenw10
                    last edited by

                    @stephenw10
                    Im in the process of removing packages.
                    How do I check the amount of memory prior to an upgrade?

                    Firewall: NetGate,Palo Alto-VM,Juniper SRX
                    Routing: Juniper, Arista, Cisco
                    Switching: Juniper, Arista, Cisco
                    Wireless: Unifi, Aruba IAP
                    JNCIP,CCNP Enterprise

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      The dashboard will give you a rough value. Otherwise check the output of top r in Diag > System Activity.

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        michmoor LAYER 8 Rebel Alliance @stephenw10
                        last edited by

                        @stephenw10

                        No packages installed.

                        b0ee9cd7-7c86-424b-a0ca-9d7b53010f50-image.png

                        8f41740e-1a91-41aa-bc56-c196f853605a-image.png

                        Firewall: NetGate,Palo Alto-VM,Juniper SRX
                        Routing: Juniper, Arista, Cisco
                        Switching: Juniper, Arista, Cisco
                        Wireless: Unifi, Aruba IAP
                        JNCIP,CCNP Enterprise

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Should be fine from there.

                          M 1 Reply Last reply Reply Quote 0
                          • M
                            michmoor LAYER 8 Rebel Alliance @stephenw10
                            last edited by

                            @stephenw10

                            So close. Prior it kep stalling on the python install. It got pass that and now its failing here.

                            602f1ddc-2ec3-4321-bcbd-799b12960179-image.png

                            cdf6765a-cb08-499d-be65-11ef906843a1-image.png

                            Firewall: NetGate,Palo Alto-VM,Juniper SRX
                            Routing: Juniper, Arista, Cisco
                            Switching: Juniper, Arista, Cisco
                            Wireless: Unifi, Aruba IAP
                            JNCIP,CCNP Enterprise

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Ok, reboot to free up RAM then try upgrading from the CLI without the webgui open.

                              pfSense-upgrade -d

                              That will show you more error output if it fails again.

                              M 1 Reply Last reply Reply Quote 0
                              • M
                                michmoor LAYER 8 Rebel Alliance @stephenw10
                                last edited by

                                @stephenw10 That last error pointed to bsnmpd. I disabled it and ran through the upgrade process.
                                That is successful and the system reboot into 24.11

                                Thanks @stephenw10 and @marcosm for the assist here. Appreciate yah.

                                One last question, help me understand the requirements for the SG1100 regarding packages. When purchasing the unit, I knew it would be limited in usage with heavier packages like Suricata. The thinking is that this location has a 300Mbps line and didn't need much in hardware.
                                I didn't feel that pfblocker or frr were heavy. Is there concern about running extra packages? Is FRR suitable for running on the unit?

                                Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                Routing: Juniper, Arista, Cisco
                                Switching: Juniper, Arista, Cisco
                                Wireless: Unifi, Aruba IAP
                                JNCIP,CCNP Enterprise

                                M 1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  It depends!

                                  FRR could use a lot if you tried to load a bgp full routing table for example. Equally pfBlocker can use a lot of RAM if you load all the huge lists. But both will run on an 1100 given some limits.

                                  But bsnmpd is interesting. It could have just been the last thing that tried to allocate RAM. 🤔

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    marcosm Netgate @michmoor
                                    last edited by

                                    @michmoor It ultimately depends on the usage. I run FRR on a lab with all devices at 1GB and haven't had issues with it. I don't think I'd run pfBlockerNG, Suricata/Snort, and FRR all on the same 1GB device, but that's not to say it can't work.

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      michmoor LAYER 8 Rebel Alliance @marcosm
                                      last edited by

                                      @marcosm
                                      FRR its for bgp and only for advertising less than 2 prefixes and receiving 10. Def not meant for edge routing in that way.

                                      The unit was also up for over 100 days so could it be possible there was some memory not properly released?

                                      In either case, successful upgrade and re-adding the packages is a snap. I will be thinking a bit more carefully about what packages will get installed at a future point.

                                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                      Routing: Juniper, Arista, Cisco
                                      Switching: Juniper, Arista, Cisco
                                      Wireless: Unifi, Aruba IAP
                                      JNCIP,CCNP Enterprise

                                      S 1 Reply Last reply Reply Quote 1
                                      • S
                                        SteveITS Galactic Empire @michmoor
                                        last edited by

                                        FWIW, ran into this with a client's 1100 tonight. Got the "137" error and it also logged, "pid 56451 (pkg-static), jid 0, uid 0, was killed: failed to reclaim memory" to get it into this thread.

                                        The first time the update page showed the 137 error, the second time it didn't "stop" updating, just hung.

                                        System Activity showed this before restart:

                                        Mem: 11M Active, 37M Inact, 231M Wired, 520M Free
                                        ARC: 57M Total, 25M MFU, 29M MRU, 181K Anon, 357K Header, 2701K Other
                                        37M Compressed, 96M Uncompressed, 2.60:1 Ratio

                                        after restart, when the upgrade succeeded (from the command line):

                                        Mem: 125M Active, 73M Inact, 262M Wired, 472M Free
                                        ARC: 82M Total, 25M MFU, 55M MRU, 114K Anon, 554K Header, 2330K Other
                                        61M Compressed, 145M Uncompressed, 2.36:1 Ratio

                                        Another 1100 with a similar config updated fine from the web GUI.

                                        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                        Upvote 👍 helpful posts!

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          Going forward this should be less of an issue. We reduced the memory requirement for pkg by using a different compression.

                                          1 Reply Last reply Reply Quote 1
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.