Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense+ 24.11 on my 1100 reboots every couple of hours

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    19 Posts 4 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      DaveWh @stephenw10
      last edited by

      @stephenw10 in the web gui, from Status/System Logs/System/General, visible from status_logs.php

      I am running zfs and a ram disk, configured by default.

      it rebooted again over night, about 2 hours ago.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by stephenw10

        Which RAM disk are you running? If it's /var you are probably losing logs when it restarts. Try disabling that at least as a test so you can get the full logs across a reboot.

        D 1 Reply Last reply Reply Quote 0
        • D
          DaveWh @stephenw10
          last edited by

          @stephenw10 OK disabled my RAM disks, no new interesting info in the logs after the last reboot:

          Dec 3 12:31:31 router kernel: .done.
          Dec 3 12:31:30 router kernel: ...
          Dec 3 12:31:30 router check_reload_status[633]: Updating all dyndns
          Dec 3 12:31:30 router kernel: done.
          Dec 3 12:31:28 router kernel: done.
          Dec 3 12:31:28 router php-cgi[637]: rc.bootup: NTPD is starting up.
          Dec 3 12:31:28 router kernel: done.
          Dec 3 12:23:43 router php-fpm[1550]: <remainder removed to avoid spam detector>

          Router rebooted at 12:30.

          D 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, and that last line was nothing interesting?

            The next step would be to connect the serial console to something and log the output. If anything is shown it will be there.
            If it reboots every few hours that should at least be relatively easy.

            1 Reply Last reply Reply Quote 0
            • D
              DaveWh @DaveWh
              last edited by

              A couple more reboots over night. The only interesting thing is snort was active at the moment:

              1:21am:

              Dec 4 01:21:22 router kernel: GDB: debug ports: uart
              Dec 4 01:21:22 router kernel: ---<<BOOT>>---
              Dec 4 01:21:22 router syslogd: kernel boot file is /boot/kernel/kernel
              Dec 4 01:21:29 router snort[49050]: [120:32:1] (http_inspect) RANGE FIELD NOT PRESENT IN GET METHOD, BUT RESPONSE WITH PARTIAL CONTENT [Classification: Unknown Traffic] [Priority: 3] {TCP} 23.32.75.29:80 -> 73.140.138.66:64173
              Dec 4 01:21:29 router snort[49050]: [120:32:1] (http_inspect) RANGE FIELD NOT PRESENT IN GET METHOD, BUT RESPONSE WITH PARTIAL CONTENT [Classification: Unknown Traffic] [Priority: 3] {TCP} 23.32.75.35:80 -> 73.140.138.66:48862

              5:20am
              Dec 4 05:20:22 router kernel: GDB: debug ports: uart
              Dec 4 05:20:22 router kernel: ---<<BOOT>>---
              Dec 4 05:20:22 router syslogd: kernel boot file is /boot/kernel/kernel
              Dec 4 05:20:16 router snort[97846]: [120:32:1] (http_inspect) RANGE FIELD NOT PRESENT IN GET METHOD, BUT RESPONSE WITH PARTIAL CONTENT [Classification: Unknown Traffic] [Priority: 3] {TCP} 23.53.122.218:80 -> 73.140.138.66:4258
              Dec 4 05:20:16 router snort[97846]: [120:32:1] (http_inspect) RANGE FIELD NOT PRESENT IN GET METHOD, BUT RESPONSE WITH PARTIAL CONTENT [Classification: Unknown Traffic] [Priority: 3] {TCP} 23.53.122.199:80 -> 73.140.138.66:7185

              M 1 Reply Last reply Reply Quote 0
              • M
                michmoor LAYER 8 Rebel Alliance @DaveWh
                last edited by

                @DaveWh Snort on an 1100?
                I am using a few 1100s now and its very memory constrained. I wouldnt be surprised if your issues are not in some way related to memory pressure.
                If possible, can you disable Snort, reboot (to clear up memory ) then monitor?

                Firewall: NetGate,Palo Alto-VM,Juniper SRX
                Routing: Juniper, Arista, Cisco
                Switching: Juniper, Arista, Cisco
                Wireless: Unifi, Aruba IAP
                JNCIP,CCNP Enterprise

                D 1 Reply Last reply Reply Quote 0
                • D
                  DaveWh @michmoor
                  last edited by

                  @michmoor OK will do. I had snort running on 24.03 just fine...

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Even if it uses all the CPU cycles it still shouldn't crash a reboot! 😕

                    D 1 Reply Last reply Reply Quote 0
                    • D
                      DaveWh @stephenw10
                      last edited by

                      @stephenw10 snort uninstalled, got a reboot, nothing interesting in the log:

                      *** Welcome to Netgate pfSense Plus 24.11-RELEASE (arm64) on router ***

                      Current Boot Environment: default
                      Next Boot Environment: default

                      WAN (wan) -> mvneta0.4090 -> v4/DHCP4: 73.140.138.66/23
                      LAN (lan) -> mvneta0.4091 -> v4: 192.168.1.1/24
                      OPT (opt1) -> mvneta0.4092 ->
                      WG_VPN (opt2) -> tun_wg0 -> v4: 10.200.0.1/24

                      1. Logout / Disconnect SSH 9) pfTop
                      2. Assign Interfaces 10) Filter Logs
                      3. Set interface(s) IP address 11) Restart GUI
                      4. Reset admin account and password 12) PHP shell + Netgate pfSense Plus tools
                      5. Reset to factory defaults 13) Update from console
                      6. Reboot system 14) Enable Secure Shell (sshd)
                      7. Halt system 15) Restore recent configuration
                      8. Ping host 16) Restart PHP-FPM
                      9. Shell

                      Enter an option: TIM-1.0
                      WTMI-devel-18.12.1-1a13f2f
                      WTMI: system early-init
                      SVC REV: 5, CPU VDD voltage: 1.237V
                      NOTICE: Booting Trusted Firmware
                      NOTICE: BL1: v1.5(release):1f8ca7e-dirty (Marvell-devel-18.12.2)
                      NOTICE: BL1: Built : 18:22:47, Oct 7 2021
                      NOTICE: BL1: Booting BL2
                      NOTICE: BL2: v1.5(release):1f8ca7e-dirty (Marvell-devel-18.12.2)
                      NOTICE: BL2: Built : 18:22:52, Oct 7 2021
                      NOTICE: BL1: Booting BL31
                      NOTICE: BL31: v1.5(release):1f8ca7e-dirty (Marvell-devel-18.12.2)
                      NOTICE: BL31: Built : 18

                      U-Boot 2018.03-devel-18.12.3-gc9aa92c-dirty (Oct 07 2021 - 18:20:55 -0300)

                      Model: Netgate 1100
                      CPU 1200 [MHz]
                      L2 800 [MHz]
                      TClock 200 [MHz]
                      DDR 750 [MHz]
                      DRAM: 1 GiB

                      "Enter an option: " was the prompt and then when the reboot cycle began, it output "TIM-1.0".

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Hmm, that looks like a hardware issue TBH. It's just rebooting with no output at all.

                        However that would still happen in 24.03 if it is.

                        D 1 Reply Last reply Reply Quote 0
                        • chudakC chudak referenced this topic on
                        • D
                          DaveWh @stephenw10
                          last edited by

                          @stephenw10 Got tired of chasing this. Bought a new device.

                          chudakC 1 Reply Last reply Reply Quote 1
                          • chudakC
                            chudak @DaveWh
                            last edited by

                            @DaveWh said in pfSense+ 24.11 on my 1100 reboots every couple of hours:

                            @stephenw10 Got tired of chasing this. Bought a new device.

                            What did you get?

                            D 1 Reply Last reply Reply Quote 0
                            • D
                              DaveWh @chudak
                              last edited by

                              @chudak SG-4100. Working fine. Came with 24.03 and upgraded to 24.11.

                              1 Reply Last reply Reply Quote 3
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.