Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense+ 24.11 on my 1100 reboots every couple of hours

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    19 Posts 4 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      DaveWh @DaveWh
      last edited by

      Wow, the current cycle lasted 30 whole minutes before rebooting again.

      Dec 1 14:23:03 router php-cgi[735]: rc.bootup: The command '/usr/local/sbin/strongswanrc stop' returned exit code '1', the output was 'strongswan not running? (check /var/run/daemon-charon.pid).'
      Dec 1 14:23:02 router kernel: ....
      Dec 1 14:23:02 router check_reload_status[731]: Updating all dyndns
      Dec 1 14:23:01 router kernel: done.
      Dec 1 14:23:00 router kernel: done.
      Dec 1 14:23:00 router php-cgi[735]: rc.bootup: NTPD is starting up.
      Dec 1 13:56:55 router kernel: done.
      Dec 1 13:56:54 router kernel: done.
      Dec 1 13:56:54 router php-cgi[735]: rc.bootup: sync unbound done.

      Just decided to reboot because, reasons. I was watching YouTube.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Do you see an alert or crash report after it reboots?

        What's shown in the system logs immediately before it reboots?

        D 1 Reply Last reply Reply Quote 0
        • D
          DaveWh @stephenw10
          last edited by

          @stephenw10 No, no error in the web UI. And I included a snippet of the log above. 13:56:55, done. 14:23, starting to reboot. This is from Status/System Logs/System/General. Is there some other log I should be looking at?

          One other point of note is I had left the bootable USB drive attached (which contains the installer). I didn't think leaving it there would cause any harm as the boot sequence normally ignores it. I have since unplugged it.

          D 1 Reply Last reply Reply Quote 0
          • D
            DaveWh @DaveWh
            last edited by

            Got another reboot:

            Uptime 00 Hour 27 Minutes 09 Seconds

            Dec 1 18:56:25 router kernel: .done.
            Dec 1 18:56:25 router kernel: ....
            Dec 1 18:56:25 router check_reload_status[680]: Updating all dyndns
            Dec 1 18:56:24 router kernel: done.
            Dec 1 18:56:23 router kernel: done.
            Dec 1 18:56:23 router php-cgi[684]: rc.bootup: NTPD is starting up.
            Dec 1 14:23:54 router kernel: done.
            Dec 1 14:23:53 router kernel: done.
            Dec 1 14:23:53 router php-cgi[684]: rc.bootup: sync unbound done.

            about 25 minutes ago. No errors in the web UI.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Hmm, what log are you taking that from? It looks odd.

              Are you running ZFS? Ram disks?

              D 1 Reply Last reply Reply Quote 0
              • D
                DaveWh @stephenw10
                last edited by

                @stephenw10 in the web gui, from Status/System Logs/System/General, visible from status_logs.php

                I am running zfs and a ram disk, configured by default.

                it rebooted again over night, about 2 hours ago.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by stephenw10

                  Which RAM disk are you running? If it's /var you are probably losing logs when it restarts. Try disabling that at least as a test so you can get the full logs across a reboot.

                  D 1 Reply Last reply Reply Quote 0
                  • D
                    DaveWh @stephenw10
                    last edited by

                    @stephenw10 OK disabled my RAM disks, no new interesting info in the logs after the last reboot:

                    Dec 3 12:31:31 router kernel: .done.
                    Dec 3 12:31:30 router kernel: ...
                    Dec 3 12:31:30 router check_reload_status[633]: Updating all dyndns
                    Dec 3 12:31:30 router kernel: done.
                    Dec 3 12:31:28 router kernel: done.
                    Dec 3 12:31:28 router php-cgi[637]: rc.bootup: NTPD is starting up.
                    Dec 3 12:31:28 router kernel: done.
                    Dec 3 12:23:43 router php-fpm[1550]: <remainder removed to avoid spam detector>

                    Router rebooted at 12:30.

                    D 1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Hmm, and that last line was nothing interesting?

                      The next step would be to connect the serial console to something and log the output. If anything is shown it will be there.
                      If it reboots every few hours that should at least be relatively easy.

                      1 Reply Last reply Reply Quote 0
                      • D
                        DaveWh @DaveWh
                        last edited by

                        A couple more reboots over night. The only interesting thing is snort was active at the moment:

                        1:21am:

                        Dec 4 01:21:22 router kernel: GDB: debug ports: uart
                        Dec 4 01:21:22 router kernel: ---<<BOOT>>---
                        Dec 4 01:21:22 router syslogd: kernel boot file is /boot/kernel/kernel
                        Dec 4 01:21:29 router snort[49050]: [120:32:1] (http_inspect) RANGE FIELD NOT PRESENT IN GET METHOD, BUT RESPONSE WITH PARTIAL CONTENT [Classification: Unknown Traffic] [Priority: 3] {TCP} 23.32.75.29:80 -> 73.140.138.66:64173
                        Dec 4 01:21:29 router snort[49050]: [120:32:1] (http_inspect) RANGE FIELD NOT PRESENT IN GET METHOD, BUT RESPONSE WITH PARTIAL CONTENT [Classification: Unknown Traffic] [Priority: 3] {TCP} 23.32.75.35:80 -> 73.140.138.66:48862

                        5:20am
                        Dec 4 05:20:22 router kernel: GDB: debug ports: uart
                        Dec 4 05:20:22 router kernel: ---<<BOOT>>---
                        Dec 4 05:20:22 router syslogd: kernel boot file is /boot/kernel/kernel
                        Dec 4 05:20:16 router snort[97846]: [120:32:1] (http_inspect) RANGE FIELD NOT PRESENT IN GET METHOD, BUT RESPONSE WITH PARTIAL CONTENT [Classification: Unknown Traffic] [Priority: 3] {TCP} 23.53.122.218:80 -> 73.140.138.66:4258
                        Dec 4 05:20:16 router snort[97846]: [120:32:1] (http_inspect) RANGE FIELD NOT PRESENT IN GET METHOD, BUT RESPONSE WITH PARTIAL CONTENT [Classification: Unknown Traffic] [Priority: 3] {TCP} 23.53.122.199:80 -> 73.140.138.66:7185

                        M 1 Reply Last reply Reply Quote 0
                        • M
                          michmoor LAYER 8 Rebel Alliance @DaveWh
                          last edited by

                          @DaveWh Snort on an 1100?
                          I am using a few 1100s now and its very memory constrained. I wouldnt be surprised if your issues are not in some way related to memory pressure.
                          If possible, can you disable Snort, reboot (to clear up memory ) then monitor?

                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                          Routing: Juniper, Arista, Cisco
                          Switching: Juniper, Arista, Cisco
                          Wireless: Unifi, Aruba IAP
                          JNCIP,CCNP Enterprise

                          D 1 Reply Last reply Reply Quote 0
                          • D
                            DaveWh @michmoor
                            last edited by

                            @michmoor OK will do. I had snort running on 24.03 just fine...

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Even if it uses all the CPU cycles it still shouldn't crash a reboot! 😕

                              D 1 Reply Last reply Reply Quote 0
                              • D
                                DaveWh @stephenw10
                                last edited by

                                @stephenw10 snort uninstalled, got a reboot, nothing interesting in the log:

                                *** Welcome to Netgate pfSense Plus 24.11-RELEASE (arm64) on router ***

                                Current Boot Environment: default
                                Next Boot Environment: default

                                WAN (wan) -> mvneta0.4090 -> v4/DHCP4: 73.140.138.66/23
                                LAN (lan) -> mvneta0.4091 -> v4: 192.168.1.1/24
                                OPT (opt1) -> mvneta0.4092 ->
                                WG_VPN (opt2) -> tun_wg0 -> v4: 10.200.0.1/24

                                1. Logout / Disconnect SSH 9) pfTop
                                2. Assign Interfaces 10) Filter Logs
                                3. Set interface(s) IP address 11) Restart GUI
                                4. Reset admin account and password 12) PHP shell + Netgate pfSense Plus tools
                                5. Reset to factory defaults 13) Update from console
                                6. Reboot system 14) Enable Secure Shell (sshd)
                                7. Halt system 15) Restore recent configuration
                                8. Ping host 16) Restart PHP-FPM
                                9. Shell

                                Enter an option: TIM-1.0
                                WTMI-devel-18.12.1-1a13f2f
                                WTMI: system early-init
                                SVC REV: 5, CPU VDD voltage: 1.237V
                                NOTICE: Booting Trusted Firmware
                                NOTICE: BL1: v1.5(release):1f8ca7e-dirty (Marvell-devel-18.12.2)
                                NOTICE: BL1: Built : 18:22:47, Oct 7 2021
                                NOTICE: BL1: Booting BL2
                                NOTICE: BL2: v1.5(release):1f8ca7e-dirty (Marvell-devel-18.12.2)
                                NOTICE: BL2: Built : 18:22:52, Oct 7 2021
                                NOTICE: BL1: Booting BL31
                                NOTICE: BL31: v1.5(release):1f8ca7e-dirty (Marvell-devel-18.12.2)
                                NOTICE: BL31: Built : 18

                                U-Boot 2018.03-devel-18.12.3-gc9aa92c-dirty (Oct 07 2021 - 18:20:55 -0300)

                                Model: Netgate 1100
                                CPU 1200 [MHz]
                                L2 800 [MHz]
                                TClock 200 [MHz]
                                DDR 750 [MHz]
                                DRAM: 1 GiB

                                "Enter an option: " was the prompt and then when the reboot cycle began, it output "TIM-1.0".

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Hmm, that looks like a hardware issue TBH. It's just rebooting with no output at all.

                                  However that would still happen in 24.03 if it is.

                                  D 1 Reply Last reply Reply Quote 0
                                  • chudakC chudak referenced this topic on
                                  • D
                                    DaveWh @stephenw10
                                    last edited by

                                    @stephenw10 Got tired of chasing this. Bought a new device.

                                    chudakC 1 Reply Last reply Reply Quote 1
                                    • chudakC
                                      chudak @DaveWh
                                      last edited by

                                      @DaveWh said in pfSense+ 24.11 on my 1100 reboots every couple of hours:

                                      @stephenw10 Got tired of chasing this. Bought a new device.

                                      What did you get?

                                      D 1 Reply Last reply Reply Quote 0
                                      • D
                                        DaveWh @chudak
                                        last edited by

                                        @chudak SG-4100. Working fine. Came with 24.03 and upgraded to 24.11.

                                        1 Reply Last reply Reply Quote 3
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.