DHCP Lease Timeouts?

virtualliquid

One of my PFSense boxes has been up and running for a few years now with no problems. Lately it has been what it seems like is dropping the DHCP leases or timing them out, then not allowing them to connect again. Causing a bunch of computers to no longer have connectivity. I am not sure what to look at for this, but I do have a log on my monitoring server that tells me exactlly when it happened to all of them, so perhaps there is a log I can view for this time frame? I just do not know where to look. Any suggestions?

virtualliquid

I found in /var/log/dhcpd.log some information, however it does not go back as far as I need.

This error is happening on all the IP's that can no longer connect? Possible a corrupt hard drive or something?

Mar 18 08:17:36 pfsense dhcpd: DHCPREQUEST for 192.168.1.104 (192.168.1.1) from de:7e:a3:27:bc:7b via em0: database update failed
Mar 18 08:17:37 pfsense dhcpd: DHCPDISCOVER from 00:15:17:2c:2b:48 via em0
Mar 18 08:17:37 pfsense dhcpd: DHCPOFFER on 192.168.1.101 to 00:15:17:2c:2b:48 via em0
Mar 18 08:17:37 pfsense dhcpd: Wrote 0 deleted host decls to leases file.
Mar 18 08:17:37 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.
Mar 18 08:17:37 pfsense dhcpd: write_lease: unable to write lease 10.1.1.101

Update:
Found a post regarding same problem, thought it might be my /var filling up but I am running this firewall on a old HP server computer with a large hard drive, here is some info on that. Not sure what the that are 100% filled are. Could be the problem? Also on the webgui it states that "/ (ufs): 100% of 64G "

/root: df -i
Filesystem 1K-blocks Used Avail Capacity iused ifree %iused Mounted on
/dev/ad0s1a 67565690 62160174 262 100% 47793 8689997 1% /
devfs 1 1 0 100% 0 0 100% /dev
/dev/md0 3484 140 3068 4% 49 973 5% /var/run
devfs 1 1 0 100% 0 0 100% /var/dhcpd/dev

Starting to look like something is filled and it needs a Digital Enema?

heper

Are you running squid or ntop or ?

Its either logs or pkg cache that filled the drive

du -sh
```might get you closer to the abuser

virtualliquid

I am running squid, I use to have NTOP installed and stopped working, it is possible it never cleanly uninstalled.

Packages installed are

nut - for UPS monitoring
Squid3

virtualliquid

du -sh shows
" 29G ."

Here is a pic of the web gui

cmb

Your disk's full. 'du -hd1 /' then drill down into subdirectories where the bulk of the space is to find it.

virtualliquid

/var/squid/logs was holding the bulk at 40% of my hard drive space.
I removed all the logs. All is fine now.

Thanks for help.

heper

where the other 60% then? pfsense uses less 1GB …

Kryzen

DHCP leases can be viewed in pfSense by navigating to Status > DHCP Leases.

Thanks…