New PFsense Installation consumes 100% CPU
-
Hi,
I just installed my new pfsense, configured everything and I am facing a problem I don't understand.
I took me several hours to finish all th configuration and now the cpu is always at 100%.
Here is my config:- Intel i7, 4 GB Ram, 160GB SSD disk
- System is at the latest version:
2.4.3-RELEASE-p1 (amd64)
built on Thu May 10 15:02:52 CDT 2018
FreeBSD 11.1-RELEASE-p10 - The following packages are installed:
acme
Backup
haproxy
openvpn-client-export
Service_Watchdog
Shellcmd
I pinpointed several processes that eat my CPU (command cat + tr)
Killing those processes solves my problem but for a time only. After a couple of minutes the processes appear again.A little help would be appreciated.
Thanks
Denis
![PFSense Top.PNG](/public/imported_attachments/1/PFSense Top.PNG)
![PFSense Top.PNG_thumb](/public/imported_attachments/1/PFSense Top.PNG_thumb)
df.txt -
Try running at the command line:
ps -auxww
That should show you what command is actually calling those.
Did it do that immediately or only after installing those packages?
Steve
-
Hi Steve,
Thank you taking time helping me.
I have joined the file with the output of the command.
To answer your question: no this appeared recently.
In fact I forst tried using squid and reverse proxy from squid but eventually used HAProxy.
I deinstalled squid.Denis
[ps -auxww.txt](/public/imported_attachments/1/ps -auxww.txt)
-
Hmm, you have a large number of arp2wol.sh processes.
Try running with the -d switch also so see if they are spawning that:
ps -auxwwd
Steve
-
Here is the output of the command:
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 0 0.0 0.0 0 384 - DLs Thu20 59:53.09 [kernel]
root 11 400.0 0.0 0 64 - RL Thu20 18784:49.68 - [idle]
root 1 0.0 0.0 5028 904 - ILs Thu20 0:00.02 - /sbin/init –
root 608 0.0 0.8 271788 30768 - Ss Thu20 0:08.67 |-- php-fpm: master process (/usr/local/lib/php-fpm.conf) (php-fpm)
root 13550 1.6 1.2 280500 47824 - S 21:20 0:27.38 | |-- php-fpm: pool nginx (php-fpm)
root 9077 0.0 0.1 21108 2796 - R 21:33 0:00.00 | |-- ps -auxwwd root 609 0.0 1.4 282676 53740 - I Thu20 1:23.45 | |-- php-fpm: pool nginx (php-fpm) root 45352 0.0 0.1 13096 2800 - I 21:50 0:00.00 | |
-- /bin/sh
root 45502 0.0 0.1 13096 2808 - I 21:50 0:00.00 | |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 4905 0.0 0.0 6180 1936 - I 21:18 0:00.00 | |
-- sleep 1200
root 610 0.0 1.3 280628 51712 - I Thu20 1:16.24 | |-- php-fpm: pool nginx (php-fpm)
root 26066 0.0 0.1 13096 2800 - I Mon21 0:00.00 | |-- /bin/sh root 26385 0.0 0.1 13096 2808 - I Mon21 0:00.00 | |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 5674 0.0 0.0 6180 1936 - I 21:18 0:00.00 | |-- sleep 1200 root 14609 0.0 1.1 273840 42644 - I 19:56 0:00.55 | |-- php-fpm: pool nginx (php-fpm) root 24238 0.0 0.1 13096 2800 - I 19:57 0:00.00 | |
-- /bin/sh
root 24348 0.0 0.1 13096 2808 - I 19:57 0:00.00 | |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 5110 0.0 0.0 6180 1936 - I 21:18 0:00.00 | |
-- sleep 1200
root 35388 0.0 1.3 280372 50060 - I Thu20 0:11.45 | |-- php-fpm: pool nginx (php-fpm)
root 1481 0.0 0.1 13096 2800 - I Sun14 0:00.00 | |-- /bin/sh root 1497 0.0 0.1 13096 2808 - I Sun14 0:00.00 | |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 4721 0.0 0.0 6180 1936 - I 21:18 0:00.00 | |-- sleep 1200 root 59887 0.0 1.3 282676 51252 - I 21:56 1:05.11 | |-- php-fpm: pool nginx (php-fpm) root 80852 0.0 0.1 13096 2800 - I 19:53 0:00.00 | |
-- /bin/sh
root 81013 0.0 0.1 13096 2808 - I 19:53 0:00.00 | |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 9508 0.0 0.0 6180 1936 - I 21:18 0:00.00 | |
-- sleep 1200
root 78646 0.0 1.3 282420 51272 - I 09:59 0:37.80 | |-- php-fpm: pool nginx (php-fpm)
root 16961 0.0 0.1 13096 2800 - I 19:56 0:00.00 | |-- /bin/sh root 17225 0.0 0.1 13096 2808 - I 19:56 0:00.00 | |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 9713 0.0 0.0 6180 1936 - I 21:18 0:00.00 | |-- sleep 1200 root 95525 0.0 1.3 280628 50912 - I 21:50 0:50.87 |
-- php-fpm: pool nginx (php-fpm)
root 80372 0.0 0.1 13096 2800 - I 19:55 0:00.00 |-- /bin/sh root 80582 0.0 0.1 13096 2808 - I 19:55 0:00.00 |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 8114 0.0 0.0 6180 1936 - I 21:18 0:00.00 |-- sleep 1200 root 611 0.0 0.1 13096 2796 - I 21:20 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 44834 0.0 0.0 6180 1936 - I 21:32 0:00.00 |
-- sleep 1200
root 623 0.0 0.1 19456 5216 - INs Thu20 0:00.06 |-- /usr/local/sbin/check_reload_status
root 625 0.0 0.1 19456 5012 - IN Thu20 0:00.00 |-- check_reload_status: Monitoring daemon of check_reload_status root 658 0.0 0.1 9176 4976 - Ss Thu20 0:18.09 |-- /sbin/devd -q -f /etc/pfSense-devd.conf root 5534 0.0 0.2 44888 8912 - Ss Thu20 0:06.85 |-- /usr/local/sbin/mpd5 -b -k -d /var/etc -f mpd_wan.conf -p /var/run/pppoe_wan.pid -s ppp pppoeclient root 6745 0.0 0.2 53524 8780 - Is Thu20 0:00.02 |-- /usr/sbin/sshd root 91818 0.0 0.2 78872 9252 - Ss 20:15 0:00.06 |
-- sshd: root@pts/0 (sshd)
root 91991 0.0 0.1 13096 2940 0 Is 20:15 0:00.00 |-- -sh (sh) root 92256 0.0 0.1 13096 2824 0 I+ 20:15 0:00.00 |
-- /bin/sh /etc/rc.initial
root 7118 0.0 0.1 13096 2796 - I Mon10 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 4671 0.0 0.0 6180 1936 - I 21:18 0:00.00 |-- sleep 1200 root 14529 0.0 0.1 12736 2940 - Ss Thu20 0:16.73 |-- /usr/local/sbin/filterlog -i pflog0 -p /var/run/filterlog.pid root 18125 0.0 0.1 13096 2796 - I 00:47 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 9459 0.0 0.0 6180 1936 - I 21:18 0:00.00 |
-- sleep 1200
root 20470 0.0 0.2 20356 6504 - Ss Thu20 0:04.76 |-- /usr/local/sbin/openvpn --config /var/etc/openvpn/server1.conf
root 26561 0.0 0.1 10988 2444 - Is Thu20 0:45.18 |-- /usr/local/bin/dpinger -S -r 0 -i WAN_PPPOE -B 213.211.139.240 -p /var/run/dpinger_WAN_PPPOE~213.211.139.240~213.219.132.16.pid -u /var/run/dpinger_WAN_PPPOE~213.211.139.240~213.219.132.16.sock -C /etc/rc.gateway_alarm -d 0 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 213.219.132.16
root 26772 0.0 0.1 13036 2520 - Is Thu20 0:37.24 |-- /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP6 -B fe80::daeb:97ff:feb3:b22f%ue0 -p /var/run/dpinger_WAN_DHCP6~fe80::daeb:97ff:feb3:b22f%ue0~fe80::207:7dff:fe56:5b00%ue0.pid -u /var/run/dpinger_WAN_DHCP6~fe80::daeb:97ff:feb3:b22f%ue0~fe80::207:7dff:fe56:5b00%ue0.sock -C /etc/rc.gateway_alarm -d 0 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 fe80::207:7dff:fe56:5b00%ue0
root 42258 0.0 0.1 13096 2796 - I 15:07 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 6007 0.0 0.0 6180 1936 - I 21:18 0:00.00 |-- sleep 1200 www 43575 0.0 0.3 34284 12932 - Ss 19:58 0:07.87 |-- /usr/local/sbin/haproxy -f /var/etc/haproxy/haproxy.cfg -p /var/run/haproxy.pid -D root 45165 0.0 0.2 35656 7416 - Is Thu20 0:00.00 |-- nginx: master process /usr/local/sbin/nginx -c /var/etc/nginx-webConfigurator.conf (nginx) root 45212 0.0 0.2 37704 8624 - S Thu20 0:05.20 | |-- nginx: worker process (nginx) root 45328 0.0 0.2 37704 8604 - S Thu20 0:07.82 | |-- nginx: worker process (nginx) root 45650 0.0 0.2 37704 9024 - S Thu20 0:23.91 | |-- nginx: worker process (nginx) root 45956 0.0 0.2 37704 9072 - S Thu20 1:27.18 | |-- nginx: worker process (nginx) root 46014 0.0 0.2 37704 9052 - S Thu20 1:04.42 |
-- nginx: worker process (nginx)
root 45245 0.0 0.1 13096 2796 - I Mon10 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 5162 0.0 0.0 6180 1936 - I 21:18 0:00.00 |-- sleep 1200 root 46358 0.0 0.1 12504 2492 - Is Thu20 0:02.04 |-- /usr/sbin/cron -s root 51087 0.0 0.3 24656 12480 - Ss Thu20 0:44.08 |-- /usr/local/sbin/ntpd -g -c /var/etc/ntpd.conf -p /var/run/ntpd.pid root 51197 0.0 0.1 13096 2796 - I 15:14 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 5812 0.0 0.0 6180 1936 - I 21:18 0:00.00 |
-- sleep 1200
root 65927 0.0 0.1 13096 2796 - I Mon10 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 9138 0.0 0.0 6180 1936 - I 21:18 0:00.00 |-- sleep 1200 root 71789 0.0 0.1 13096 2796 - I 00:48 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 4591 0.0 0.0 6180 1936 - I 21:18 0:00.00 |
-- sleep 1200
root 72273 0.0 0.1 8236 2220 - Is Mon15 0:00.08 |-- /usr/local/sbin/dhcpleases -l /var/dhcpd/var/db/dhcpd.leases -d desbreit.lan -p /var/run/dnsmasq.pid -h /etc/hosts
nobody 75451 0.0 0.1 31948 5152 - S Mon15 0:14.49 |-- /usr/local/sbin/dnsmasq --all-servers -C /dev/null --dhcp-hostsfile=/etc/hosts --dns-forward-max=5000 --cache-size=10000 --local-ttl=1
root 80627 0.0 0.1 10492 2548 - Ss Thu20 0:09.60 |-- /usr/sbin/syslogd -s -c -c -l /var/dhcpd/var/run/log -l /tmp/haproxy_chroot/var/run/log -P /var/run/syslog.pid -f /etc/syslog.conf
root 24115 0.0 0.1 10588 2320 - Is Thu20 0:00.01 |-- /usr/local/sbin/sshlockout_pf 15 dhcpd 83497 0.0 0.2 16656 8008 - Ss Mon15 0:05.84 |-- /usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd -cf /etc/dhcpd.conf -pf /var/run/dhcpd.pid em0 root 84249 0.0 0.1 8232 2012 - Is Thu20 0:00.00 |-- /usr/local/bin/minicron 240 /var/run/ping_hosts.pid /usr/local/bin/ping_hosts.sh root 84368 0.0 0.1 8232 2028 - I Thu20 0:00.13 |
-- minicron: helper /usr/local/bin/ping_hosts.sh (minicron)
root 84464 0.0 0.1 8232 2012 - Is Thu20 0:00.00 |-- /usr/local/bin/minicron 3600 /var/run/expire_accounts.pid /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts
root 84870 0.0 0.1 8232 2028 - I Thu20 0:00.01 |-- minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts (minicron) root 85167 0.0 0.1 8232 2012 - Is Thu20 0:00.00 |-- /usr/local/bin/minicron 86400 /var/run/update_alias_url_data.pid /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data root 85576 0.0 0.1 8232 2028 - I Thu20 0:00.00 |
-- minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data (minicron)
root 22293 0.0 0.1 39440 2848 v0 Is Thu20 0:00.01 |-- login [pam] (login)
root 24252 0.0 0.1 13096 2948 v0 I Thu20 0:00.00 |– -sh (sh) root 24358 0.0 0.1 13096 2828 v0 I+ Thu20 0:00.00 |
-- /bin/sh /etc/rc.initial
root 59016 0.0 0.1 13096 2864 v0- IN Thu20 0:51.04 |-- /bin/sh /var/db/rrd/updaterrd.sh
root 24331 0.0 0.0 6180 1936 - IN 21:32 0:00.00 |-- sleep 60 root 22384 0.0 0.1 10396 2144 v1 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv1 root 22461 0.0 0.1 10396 2144 v2 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv2 root 22617 0.0 0.1 10396 2144 v3 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv3 root 22938 0.0 0.1 10396 2144 v4 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv4 root 23073 0.0 0.1 10396 2144 v5 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv5 root 23118 0.0 0.1 10396 2144 v6 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv6 root 23336 0.0 0.1 10396 2144 v7 Is+ Thu20 0:00.00
-- /usr/libexec/getty Pc ttyv7
root 2 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto]
root 3 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto returns 0]
root 4 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto returns 1]
root 5 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto returns 2]
root 6 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto returns 3]
root 7 0.0 0.0 0 32 - DL Thu20 0:10.17 - [cam]
root 8 0.0 0.0 0 16 - IL Thu20 0:00.00 - [fw0_probe]
root 9 0.0 0.0 0 16 - DL Thu20 0:00.00 - [cbb0 event thread]
root 10 0.0 0.0 0 16 - DL Thu20 0:00.00 - [audit]
root 12 0.0 0.0 0 384 - WL Thu20 45:01.96 - [intr]
root 13 0.0 0.0 0 64 - DL Thu20 0:00.40 - [ng_queue]
root 14 0.0 0.0 0 48 - DL Thu20 0:01.45 - [geom]
root 15 0.0 0.0 0 176 - DL Thu20 115:16.35 - [usb]
root 16 0.0 0.0 0 16 - DL Thu20 0:00.05 - [soaiod1]
root 17 0.0 0.0 0 16 - DL Thu20 0:00.05 - [soaiod2]
root 18 0.0 0.0 0 16 - DL Thu20 0:00.05 - [soaiod3]
root 19 0.0 0.0 0 16 - DL Thu20 0:00.05 - [soaiod4]
root 20 0.0 0.0 0 16 - DL Thu20 0:00.00 - [sctp_iterator]
root 21 0.0 0.0 0 16 - DL Thu20 1:26.95 - [pf purge]
root 22 0.0 0.0 0 16 - DL Thu20 2:35.30 - [acpi_thermal]
root 23 0.0 0.0 0 16 - DL Thu20 0:00.05 - [acpi_cooling5]
root 24 0.0 0.0 0 16 - DL Thu20 6:20.66 - [rand_harvestq]
root 25 0.0 0.0 0 16 - DL Thu20 0:00.29 - [enc_daemon0]
root 26 0.0 0.0 0 48 - DL Thu20 0:04.50 - [pagedaemon]
root 27 0.0 0.0 0 16 - DL Thu20 0:00.00 - [vmdaemon]
root 28 0.0 0.0 0 16 - DL Thu20 0:00.00 - [pagezero]
root 29 0.0 0.0 0 16 - DL Thu20 0:01.39 - [bufspacedaemon]
root 30 0.0 0.0 0 32 - DL Thu20 0:05.95 - [bufdaemon]
root 31 0.0 0.0 0 16 - DL Thu20 0:01.40 - [vnlru]
root 32 0.0 0.0 0 16 - DL Thu20 0:50.31 - [syncer]
root 65 0.0 0.0 0 16 - DL Thu20 0:00.34 - [md0] -
but now its 400% idle.. and the tr / urandom commands aren't running anymore?
anyhow arp2wol.sh doesnt exist on a 'new installation'
-
Yes,
You are right I killed those processes but in the meantime they reappeared.
Here is the result of the command:USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 0 0.4 0.0 0 384 - DLs Thu20 59:56.18 [kernel]
root 15 1.8 0.0 0 176 - DL Thu20 115:22.04 - [usb]
root 12 0.6 0.0 0 384 - WL Thu20 45:04.30 - [intr]
root 1 0.0 0.0 5028 904 - ILs Thu20 0:00.02 - /sbin/init –
root 608 0.0 0.8 271788 30768 - Ss Thu20 0:08.69 |-- php-fpm: master process (/usr/local/lib/php-fpm.conf) (php-fpm)
root 13550 2.7 1.3 282676 49676 - S 21:20 0:45.03 | |-- php-fpm: pool nginx (php-fpm)
root 539 0.0 0.1 21108 2832 - R 21:45 0:00.00 | |-- ps -auxwwd root 609 0.0 1.4 282676 53740 - I Thu20 1:23.45 | |-- php-fpm: pool nginx (php-fpm) root 45352 0.0 0.1 13096 2800 - I 21:50 0:00.00 | |
-- /bin/sh
root 45502 0.0 0.1 13096 2808 - I 21:50 0:00.00 | |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 95176 0.0 0.1 13096 2808 - I 21:38 0:00.00 | |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 95522 17.0 0.1 8244 2032 - R 21:38 1:06.50 | | |-- tr -dc 0-9
root 95262 13.6 0.1 8236 1996 - R 21:38 0:51.50 | |-- cat /dev/urandom root 610 0.0 1.3 280628 51712 - I Thu20 1:16.24 | |-- php-fpm: pool nginx (php-fpm) root 26066 0.0 0.1 13096 2800 - I Mon21 0:00.00 | |
-- /bin/sh
root 26385 0.0 0.1 13096 2808 - I Mon21 0:00.00 | |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 90756 0.0 0.1 13096 2808 - I 21:38 0:00.00 | |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 92268 16.1 0.1 8244 2032 - R 21:38 1:05.25 | | |-- tr -dc 0-9
root 92202 11.1 0.1 8236 1996 - S 21:38 0:49.81 | |-- cat /dev/urandom root 14609 0.0 1.1 273840 42644 - I 19:56 0:00.55 | |-- php-fpm: pool nginx (php-fpm) root 24238 0.0 0.1 13096 2800 - I 19:57 0:00.00 | |
-- /bin/sh
root 24348 0.0 0.1 13096 2808 - I 19:57 0:00.00 | |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 96941 0.0 0.1 13096 2808 - I 21:38 0:00.00 | |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 97271 16.7 0.1 8244 2032 - R 21:38 1:05.27 | | |-- tr -dc 0-9
root 97159 12.5 0.1 8236 1996 - S 21:38 0:50.06 | |-- cat /dev/urandom root 35388 0.0 1.3 280372 50060 - I Thu20 0:11.45 | |-- php-fpm: pool nginx (php-fpm) root 1481 0.0 0.1 13096 2800 - I Sun14 0:00.00 | |
-- /bin/sh
root 1497 0.0 0.1 13096 2808 - I Sun14 0:00.00 | |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 90154 0.0 0.1 13096 2808 - I 21:38 0:00.00 | |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 91139 16.9 0.1 8244 2032 - R 21:38 1:06.01 | | |-- tr -dc 0-9
root 90909 12.2 0.1 8236 1996 - S 21:38 0:50.84 | |-- cat /dev/urandom root 59887 0.0 1.3 282676 51252 - I 21:56 1:05.11 | |-- php-fpm: pool nginx (php-fpm) root 80852 0.0 0.1 13096 2800 - I 19:53 0:00.00 | |
-- /bin/sh
root 81013 0.0 0.1 13096 2808 - I 19:53 0:00.00 | |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 98188 0.0 0.1 13096 2808 - I 21:38 0:00.00 | |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 98364 16.1 0.1 8244 2032 - R 21:38 1:05.16 | | |-- tr -dc 0-9
root 98207 11.7 0.1 8236 1996 - S 21:38 0:50.25 | |-- cat /dev/urandom root 78646 0.0 1.3 282420 51272 - I 09:59 0:37.80 | |-- php-fpm: pool nginx (php-fpm) root 16961 0.0 0.1 13096 2800 - I 19:56 0:00.00 | |
-- /bin/sh
root 17225 0.0 0.1 13096 2808 - I 19:56 0:00.00 | |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 98748 0.0 0.1 13096 2808 - I 21:38 0:00.00 | |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 99281 16.2 0.1 8244 2032 - R 21:38 1:05.16 | | |-- tr -dc 0-9
root 99027 12.1 0.1 8236 1996 - S 21:38 0:50.04 | |-- cat /dev/urandom root 95525 0.0 1.3 280628 50912 - I 21:50 0:50.87 |
-- php-fpm: pool nginx (php-fpm)
root 80372 0.0 0.1 13096 2800 - I 19:55 0:00.00 |-- /bin/sh root 80582 0.0 0.1 13096 2808 - I 19:55 0:00.00 |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop
root 93002 0.0 0.1 13096 2808 - I 21:38 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh stop root 94015 15.1 0.1 8244 2032 - R 21:38 1:04.45 | |-- tr -dc 0-9 root 93458 11.5 0.1 8236 1996 - S 21:38 0:49.65 |
-- cat /dev/urandom
root 611 0.0 0.1 13096 2796 - I 21:20 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 44834 0.0 0.0 6180 1936 - I 21:32 0:00.00 |-- sleep 1200 root 623 0.0 0.1 19456 5216 - INs Thu20 0:00.06 |-- /usr/local/sbin/check_reload_status root 625 0.0 0.1 19456 5012 - IN Thu20 0:00.00 |
-- check_reload_status: Monitoring daemon of check_reload_status
root 658 0.0 0.1 9176 4976 - Ss Thu20 0:18.12 |-- /sbin/devd -q -f /etc/pfSense-devd.conf
root 5534 0.0 0.2 44888 8912 - Ss Thu20 0:06.86 |-- /usr/local/sbin/mpd5 -b -k -d /var/etc -f mpd_wan.conf -p /var/run/pppoe_wan.pid -s ppp pppoeclient
root 6745 0.0 0.2 53524 8780 - Is Thu20 0:00.02 |-- /usr/sbin/sshd
root 91818 0.0 0.2 78872 9252 - Ss 20:15 0:00.06 |-- sshd: root@pts/0 (sshd) root 91991 0.0 0.1 13096 2940 0 Is 20:15 0:00.00 |
-- -sh (sh)
root 92256 0.0 0.1 13096 2824 0 I+ 20:15 0:00.00 |-- /bin/sh /etc/rc.initial root 7118 0.0 0.1 13096 2796 - I Mon10 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 90635 0.0 0.1 13096 2796 - I 21:38 0:00.00 |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 91598 17.2 0.1 8244 2028 - R 21:38 1:05.20 | |-- tr -dc 0-9
root 91118 12.7 0.1 8236 1992 - S 21:38 0:50.46 |-- cat /dev/urandom root 14529 0.0 0.1 12736 2940 - Ss Thu20 0:16.75 |-- /usr/local/sbin/filterlog -i pflog0 -p /var/run/filterlog.pid root 18125 0.0 0.1 13096 2796 - I 00:47 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 97650 0.0 0.1 13096 2796 - I 21:38 0:00.00 |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 98080 15.7 0.1 8244 2028 - R 21:38 1:06.49 | |-- tr -dc 0-9
root 97924 11.8 0.1 8236 1992 - S 21:38 0:51.35 |-- cat /dev/urandom root 20470 0.0 0.2 20356 6504 - Ss Thu20 0:04.76 |-- /usr/local/sbin/openvpn --config /var/etc/openvpn/server1.conf root 26561 0.0 0.1 10988 2444 - Is Thu20 0:45.27 |-- /usr/local/bin/dpinger -S -r 0 -i WAN_PPPOE -B 213.211.139.240 -p /var/run/dpinger_WAN_PPPOE~213.211.139.240~213.219.132.16.pid -u /var/run/dpinger_WAN_PPPOE~213.211.139.240~213.219.132.16.sock -C /etc/rc.gateway_alarm -d 0 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 213.219.132.16 root 26772 0.0 0.1 13036 2520 - Is Thu20 0:37.32 |-- /usr/local/bin/dpinger -S -r 0 -i WAN_DHCP6 -B fe80::daeb:97ff:feb3:b22f%ue0 -p /var/run/dpinger_WAN_DHCP6~fe80::daeb:97ff:feb3:b22f%ue0~fe80::207:7dff:fe56:5b00%ue0.pid -u /var/run/dpinger_WAN_DHCP6~fe80::daeb:97ff:feb3:b22f%ue0~fe80::207:7dff:fe56:5b00%ue0.sock -C /etc/rc.gateway_alarm -d 0 -s 500 -l 2000 -t 60000 -A 1000 -D 500 -L 20 fe80::207:7dff:fe56:5b00%ue0 root 42258 0.0 0.1 13096 2796 - I 15:07 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 92615 0.0 0.1 13096 2796 - I 21:38 0:00.00 |
-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 94546 16.4 0.1 8244 2028 - R 21:38 1:04.54 | |-- tr -dc 0-9
root 93890 11.9 0.1 8236 1992 - S 21:38 0:49.83 |-- cat /dev/urandom www 43575 0.0 0.3 34284 12932 - Ss 19:58 0:08.72 |-- /usr/local/sbin/haproxy -f /var/etc/haproxy/haproxy.cfg -p /var/run/haproxy.pid -D root 45165 0.0 0.2 35656 7416 - Is Thu20 0:00.00 |-- nginx: master process /usr/local/sbin/nginx -c /var/etc/nginx-webConfigurator.conf (nginx) root 45212 0.0 0.2 37704 8624 - S Thu20 0:05.21 | |-- nginx: worker process (nginx) root 45328 0.0 0.2 37704 8604 - S Thu20 0:07.85 | |-- nginx: worker process (nginx) root 45650 0.0 0.2 37704 9024 - S Thu20 0:24.11 | |-- nginx: worker process (nginx) root 45956 0.0 0.2 37704 9072 - S Thu20 1:27.64 | |-- nginx: worker process (nginx) root 46014 0.0 0.2 37704 9052 - S Thu20 1:04.74 |
-- nginx: worker process (nginx)
root 45245 0.0 0.1 13096 2796 - I Mon10 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 93289 0.0 0.1 13096 2796 - I 21:38 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 94226 16.2 0.1 8244 2028 - R 21:38 1:04.79 | |-- tr -dc 0-9 root 93577 11.9 0.1 8236 1992 - S 21:38 0:50.15 |
-- cat /dev/urandom
root 46358 0.0 0.1 12504 2492 - Is Thu20 0:02.04 |-- /usr/sbin/cron -s
root 51087 0.0 0.3 24656 12480 - Ss Thu20 0:44.17 |-- /usr/local/sbin/ntpd -g -c /var/etc/ntpd.conf -p /var/run/ntpd.pid
root 51197 0.0 0.1 13096 2796 - I 15:14 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 95775 0.0 0.1 13096 2796 - I 21:38 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 96104 16.3 0.1 8244 2028 - R 21:38 1:05.29 | |-- tr -dc 0-9 root 95945 13.1 0.1 8236 1992 - S 21:38 0:50.53 |
-- cat /dev/urandom
root 65927 0.0 0.1 13096 2796 - I Mon10 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 96362 0.0 0.1 13096 2796 - I 21:38 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 96596 15.4 0.1 8244 2028 - R 21:38 1:04.96 | |-- tr -dc 0-9 root 96377 12.3 0.1 8236 1992 - S 21:38 0:50.24 |
-- cat /dev/urandom
root 71789 0.0 0.1 13096 2796 - I 00:48 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start
root 90380 0.0 0.1 13096 2796 - I 21:38 0:00.00 |-- /bin/sh /usr/local/etc/rc.d/arp2wol.sh start root 91298 15.8 0.1 8244 2028 - R 21:38 1:04.80 | |-- tr -dc 0-9 root 90843 11.9 0.1 8236 1992 - S 21:38 0:50.17 |
-- cat /dev/urandom
root 72273 0.0 0.1 8236 2220 - Is Mon15 0:00.08 |-- /usr/local/sbin/dhcpleases -l /var/dhcpd/var/db/dhcpd.leases -d desbreit.lan -p /var/run/dnsmasq.pid -h /etc/hosts
nobody 75451 0.0 0.1 31948 5152 - S Mon15 0:14.50 |-- /usr/local/sbin/dnsmasq --all-servers -C /dev/null --dhcp-hostsfile=/etc/hosts --dns-forward-max=5000 --cache-size=10000 --local-ttl=1
root 80627 0.0 0.1 10492 2548 - Ss Thu20 0:09.71 |-- /usr/sbin/syslogd -s -c -c -l /var/dhcpd/var/run/log -l /tmp/haproxy_chroot/var/run/log -P /var/run/syslog.pid -f /etc/syslog.conf
root 24115 0.0 0.1 10588 2320 - Is Thu20 0:00.01 |-- /usr/local/sbin/sshlockout_pf 15 dhcpd 83497 0.0 0.2 16656 8008 - Ss Mon15 0:05.89 |-- /usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd -cf /etc/dhcpd.conf -pf /var/run/dhcpd.pid em0 root 84249 0.0 0.1 8232 2012 - Is Thu20 0:00.00 |-- /usr/local/bin/minicron 240 /var/run/ping_hosts.pid /usr/local/bin/ping_hosts.sh root 84368 0.0 0.1 8232 2028 - I Thu20 0:00.13 |
-- minicron: helper /usr/local/bin/ping_hosts.sh (minicron)
root 84464 0.0 0.1 8232 2012 - Is Thu20 0:00.00 |-- /usr/local/bin/minicron 3600 /var/run/expire_accounts.pid /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts
root 84870 0.0 0.1 8232 2028 - I Thu20 0:00.01 |-- minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.expireaccounts (minicron) root 85167 0.0 0.1 8232 2012 - Is Thu20 0:00.00 |-- /usr/local/bin/minicron 86400 /var/run/update_alias_url_data.pid /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data root 85576 0.0 0.1 8232 2028 - I Thu20 0:00.00 |
-- minicron: helper /usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data (minicron)
root 22293 0.0 0.1 39440 2848 v0 Is Thu20 0:00.01 |-- login [pam] (login)
root 24252 0.0 0.1 13096 2948 v0 I Thu20 0:00.00 |– -sh (sh) root 24358 0.0 0.1 13096 2828 v0 I+ Thu20 0:00.00 |
-- /bin/sh /etc/rc.initial
root 59016 0.0 0.1 13096 2864 v0- SN Thu20 0:51.11 |-- /bin/sh /var/db/rrd/updaterrd.sh
root 61795 0.0 0.0 6180 1936 - SN 21:45 0:00.00 |-- sleep 60 root 22384 0.0 0.1 10396 2144 v1 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv1 root 22461 0.0 0.1 10396 2144 v2 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv2 root 22617 0.0 0.1 10396 2144 v3 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv3 root 22938 0.0 0.1 10396 2144 v4 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv4 root 23073 0.0 0.1 10396 2144 v5 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv5 root 23118 0.0 0.1 10396 2144 v6 Is+ Thu20 0:00.00 |-- /usr/libexec/getty Pc ttyv6 root 23336 0.0 0.1 10396 2144 v7 Is+ Thu20 0:00.00
-- /usr/libexec/getty Pc ttyv7
root 2 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto]
root 3 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto returns 0]
root 4 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto returns 1]
root 5 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto returns 2]
root 6 0.0 0.0 0 16 - DL Thu20 0:00.00 - [crypto returns 3]
root 7 0.0 0.0 0 32 - DL Thu20 0:10.19 - [cam]
root 8 0.0 0.0 0 16 - IL Thu20 0:00.00 - [fw0_probe]
root 9 0.0 0.0 0 16 - DL Thu20 0:00.00 - [cbb0 event thread]
root 10 0.0 0.0 0 16 - DL Thu20 0:00.00 - [audit]
root 11 0.0 0.0 0 64 - RL Thu20 18802:51.09 - [idle]
root 13 0.0 0.0 0 64 - DL Thu20 0:00.40 - [ng_queue]
root 14 0.0 0.0 0 48 - DL Thu20 0:01.51 - [geom]
root 16 0.0 0.0 0 16 - DL Thu20 0:00.05 - [soaiod1]
root 17 0.0 0.0 0 16 - DL Thu20 0:00.05 - [soaiod2]
root 18 0.0 0.0 0 16 - DL Thu20 0:00.05 - [soaiod3]
root 19 0.0 0.0 0 16 - DL Thu20 0:00.05 - [soaiod4]
root 20 0.0 0.0 0 16 - DL Thu20 0:00.00 - [sctp_iterator]
root 21 0.0 0.0 0 16 - DL Thu20 1:27.09 - [pf purge]
root 22 0.0 0.0 0 16 - DL Thu20 2:35.56 - [acpi_thermal]
root 23 0.0 0.0 0 16 - DL Thu20 0:00.05 - [acpi_cooling5]
root 24 0.0 0.0 0 16 - DL Thu20 6:21.58 - [rand_harvestq]
root 25 0.0 0.0 0 16 - DL Thu20 0:00.29 - [enc_daemon0]
root 26 0.0 0.0 0 48 - DL Thu20 0:04.51 - [pagedaemon]
root 27 0.0 0.0 0 16 - DL Thu20 0:00.00 - [vmdaemon]
root 28 0.0 0.0 0 16 - DL Thu20 0:00.00 - [pagezero]
root 29 0.0 0.0 0 16 - DL Thu20 0:01.40 - [bufspacedaemon]
root 30 0.0 0.0 0 32 - DL Thu20 0:05.96 - [bufdaemon]
root 31 0.0 0.0 0 16 - DL Thu20 0:01.40 - [vnlru]
root 32 0.0 0.0 0 16 - DL Thu20 0:50.41 - [syncer]
root 65 0.0 0.0 0 16 - DL Thu20 0:00.34 - [md0] -
Ok so what is arp2wol.sh? Did you add that?
That's the problem anyway.
Ah: https://forum.pfsense.org/index.php?topic=65092.0
Steve
-
It is a script that is supposed to send a magic packet to a host once there is an attempt to reach it.
Here is the code
#! /bin/sh # This program listens for arp lookups and triggers something INTERFACE=vr2 # Listen on this interface. RESTART="1200" # After the trigger, wait this long to start listening again. TARGET_IP=$1 # Listen for this IP. TARGET_BROADCAST=$2 # Broadcast to send the wol frame to. TARGET_MAC=$3 # MAC address to send the wol frame to. # Create path to initial pid file. add some randomness in case you want to run it multiple times pid="/var/run/dumper$(cat /dev/urandom | tr -dc '0-9' | head -c 10).pid" while true do # Check if not another process is using the same pidfile. while [ -f $pid ] do pid="/var/run/dumper$(cat /dev/urandom | tr -dc '0-9' | head -c 10).pid" done; # Actually run tcpdump (tcpdump -p -S -l -n -i $INTERFACE arp dst $TARGET_IP & echo $! >&3 ) 3>$pid | while read data do if [ -f $pid ]; then fping -c 1 $TARGET_IP if [ "$?" -ne "0" ]; then logger -t arp2wol "$TARGET_IP is down, starting it." wol -i $TARGET_BROADCAST $TARGET_MAC fi kill -9 $(cat $pid) rm $pid fi done; sleep $RESTART done;
-
Ok Steve,
You are right.
I added it hoping to have the correct result but it apparently didn't.
I will now directly remove it.
Thanks so much for your prompt help.Denis
-
No worries. It's an interesting script but it's old and clearly needs some tweaks for a current pfSense version.
All of your CPU time to create random PIDs seems extreme! ;)
Steve