Web UI crash every 5 minutes or so

wallabybob

I don't know if this is specific to the version of pFsense I am running or is a general problem. I don't know if it related to the problem reported in this thread.

I went to Diagnostics -> Command Prompt, typed a command in the Command box and hit the Enter key. The web page is "stalled", the browser reporting (after some minutes) Waiting for … (the name of my pfSense box).

I clicked on the browser "Abort" button then attempted to go to the home page of my pfSense box and the browser again reported Waiting for …

I am using Chromium. I then used Firefox (without exiting from Chromium) and connected to the home page of my pfSense box. My pfSense box is running

2.0.1-RELEASE (i386)
built on Mon Dec 12 17:53:52 EST 2011
FreeBSD 8.1-RELEASE-p4

as reported on the home page.

cmb

@wallabybob:

I went to Diagnostics -> Command Prompt, typed a command in the Command box and hit the Enter key. The web page is "stalled", the browser reporting (after some minutes) Waiting for … (the name of my pfSense box).

If you run a command there that never ends, like "ping google.com", that's the expected result.

wallabybob

The command was```
/etc/rc.banner

Synack 0

@wallabybob:

Could you give a bit more detail on what you mean by "crash"? the page doesn't complete loading? you get an unexpected error report? (If so, what is the report?)

No HTTPS response is returned to my browser (not even a 4XX or 5XX code). Nothing. Chrome says "This webpage is not available". You don't say…
I'll try HTTP.

@wallabybob:

What happens when you close and restart the web browser?

Nothing. Tried rebooting, switching to other browsers, it didn't work… This is a server-side error.

@wallabybob:

Can you reliably get it to "crash" by going to a particular page? If so, what page?

Nope, it's a random crash. Sometime i'm just managing my firewall rules, then I take a brake and when I come back, bam ! Crash.

@wallabybob:

Please post the output of pfSense shell command```
top -S -H -d 2

Synack 0

Edit : Holy **** ! It still crashes using HTTP : "No data received".

Just to let you know : i reverted to HTTP (Console –> Set interface(s) IP address --> x.x.x.x /x --> DHCP ? (n) --> Revert to HTTP ? (y)).

Web gui came back without needing a reboot ! This is great. Hope it won't crash anymore, but this already seems to be an improvement.
HTTPS isn't usefull at all in my case (separate network for gui), so i'll just keep HTTP and let you know if it stays up. :)

tim.mcmanus

@tim.mcmanus:

Anything in the system logs? Also check the lighttpd logs too.

clog /var/log/lighttpd.error.log

and

clog /var/log/lighttpd.log

I never saw these logs posted. These logs are the service logs and will most definitely determine why this particular service is crashing. Please post them.

Synack 0

As I already said, those files contain absolutely nothing.
As a matter of fact, the lighttpd.error.log file doesn't even exists.

tim.mcmanus

It seems very odd that neither lighttpd or php are generating any errors. And the only thing you're having an issue with is the webUI. The rest of the installation works okay?

Synack 0

This is very strange, indeed. As long as I know, everything is working great apart from the web GUI (I don't think I'm using 100% of pfSense's functionnalities, but I haven't noticed any other problem).

My PPTP VPN is OK, my firewall rules run as expected, routing is working great…

I'm experiencing this problem on ONE COMPUTER ONLY.
I always run pfSense as a VM on top of ESXi 5.1. There's only ONE HOST doing this. I tried removing the VM and starting a new one from scratch, with a fine ISO (checked checksum). It does exactly the same thing. Could hardware be the problem ?

tim.mcmanus

Are you running snort?

It's seems strange that port 80 works and then becomes inaccessible. If the webUI were unaccessible, I would assume something would be generating an error log. It could be hardware, it could be ESXi, and it could be something running on the pfSense installation. I've had snort block me out of my own LAN before and other configuration issues that I created on my own.

One last thing, check the firewall logs on the pfSense box and see if your IP is getting blocked on port 80 for some reason.

Synack 0

I tried to eliminate every "custom" thing that could fail.
Basically, it's just my computer and the pfSense VM. Nothing between us, no firewall rule blocking or rejecting traffic.
The web gui comes back for a few minutes when I reboot the pfSense VM.

Synack 0

It's strange I don't have a lighttpd.error.log.

All the logs are stored in /var/log right ?

Is there anything else I could check to try to find the error ? For the moment, I don't have a single clue and I bet it's even harder for you trying to diagnosticate the problem.

Thanks a lot.

Edit : All my VMWare ESXi interfaces are "flexible". I added one more interface with the "E1000" type and put it on the same network as my web UI interface.
I've been able to access the web ui with this second interface, although it was crashed (again) on the first one.
So could this possibly be a problem linked to the type of interface within ESXi ?
I'll wait and see if this second interface crashes too…

wallabybob

Have you checked the firewall log:
@tim.mcmanus:

One last thing, check the firewall logs on the pfSense box and see if your IP is getting blocked on port 80 for some reason.

Do you get a different results if you use IP address in the URL instead of hostname? (Perhaps DNS is playing tricks.)

Do you have multiple systems with the same IP address as the address on which you access the pfSense GUI? (Perhaps another VM that starts up from time to time.)

What is the output of pfSense shell command```
sockstat


When you have a browser session that appears to have stalled I suggest you start a packet capture on the VMWARE physical interface by which you access the pfSense GUI and then attempt access in another browser. (Perhaps start with Firefox then switch to Chromium or Opera) Does the access attempt appear in the packet capture?

Klaws

@S(y)nack:

All my VMWare ESXi interfaces are "flexible". I added one more interface with the "E1000" type and put it on the same network as my web UI interface.
I've been able to access the web ui with this second interface, although it was crashed (again) on the first one.
So could this possibly be a problem linked to the type of interface within ESXi ?
I'll wait and see if this second interface crashes too…

Interesting. I remember having serious issues with the e1000 interface; a change to flexible solved my problems. However, this was with FreeBSD 6.4 under VMWare Server 2.0. Maybe it's the other way around with the FreeBSD 8.1 and ESXi 5.1?