Packet Capture Causes GUI Error?

guardian

I decided to leave a packet capture running for a few days, and when I hit stop I got the following:

Crash report begins.  Anonymous machine information:

amd64
11.2-RELEASE-p4
FreeBSD 11.2-RELEASE-p4 #2 b00c407ba5d(RELENG_2_4_4): Mon Nov 26 11:41:48 EST 2018     root@buildbot2.nyi.netgate.com:/build/ce-crossbuild-244/obj/amd64/ZfGpH5cd/build/ce-crossbuild-244/pfSense/tmp/FreeBSD-src/sys/pfSense

Crash report details:

PHP Errors:
[27-Dec-2018 19:35:43 America/Toronto] PHP Fatal error:  Allowed memory size of 536870912 bytes exhausted (tried to allocate 532692992 bytes) in /usr/local/www/diag_packet_capture.php on line 541
[27-Dec-2018 19:35:43 America/Toronto] PHP Fatal error:  Allowed memory size of 536870912 bytes exhausted (tried to allocate 532676888 bytes) in Unknown on line 0



No FreeBSD crash data found.

I was able to download the packet capture by clicking download, but I would think this initial error condition should be handled a bit more gracefully??

I thought I should post this for what it is worth.

stephenw10

What size was the actual capture file?

Steve

guardian

@stephenw10 said in Packet Capture Causes GUI Error?:

What size was the actual capture file?

Steve
Hi @stephenw10 - 6.1 GB (6,056,675,573 bytes). After the error, I was able to click the download button and download the file.

stephenw10

Hmm, yeah that would do it!

I guess there could be some checking to prevent it trying to display large pcaps. Maybe default the detail level to 'None' or something similar.

Have you opened that as a feature request or bug report on redmine? I don't see anything at a quick look.

Steve

stephenw10

I created a bug to track it: https://redmine.pfsense.org/issues/9239

guardian

@stephenw10 said in Packet Capture Causes GUI Error?:

I created a bug to track it: https://redmine.pfsense.org/issues/9239

Thanks for doing that-Great job of writing up!
(Not sure if its worth suggesting, but another possible solution might be to cut the output at some predefined number rather than none. Might also be easier to code as it wouldn't be necessary to create a "None" option. If you think the idea has merit please add to you report.)

Thanks again for creating the report!