Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SG-3100 Reboots after FW Rule hits 1TB

    Scheduled Pinned Locked Moved Official Netgate® Hardware
    17 Posts 8 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      Is there a crash report on the dashboard when it reboots? Anything in the logs from before the reboot?

      If you leave a device connected to the console, logging the console output, does it capture any crash information when the reboot happens?

      There aren't any issues with total traffic passed on that unit in general that I'm aware of, though there have been some reports of the crypto device having an issue over time that may share some symptoms. IIRC that doesn't reboot, though, just fails to pass IPsec when it happens.

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      styxlS 1 Reply Last reply Reply Quote 0
      • styxlS
        styxl @jimp
        last edited by

        @jimp
        unfortunately there is no crash report on the dashboard or anything logged to console, it will take weeks to reach 1TB and when that nears i will setup logging to see if i am able to catch a crash, is there a place on the SSD where crash reports are stored?

        RicoR 1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          If there is one stored it will show on the dashboard, so looking around for one is unlikely to show anything that isn't displayed in the GUI. That said, they are normally stored in /var/crash though I don't think the 3100 is setup to store crash dumps as it doesn't have swap space configured on the SSD.

          The console would be the most likely place for it to log any relevant crash messages when it happens.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          styxlS 1 Reply Last reply Reply Quote 0
          • styxlS
            styxl @jimp
            last edited by

            @jimp ok, i just checked and the directory is empty. will wait for it to happen again, in the meantime i have disabled SNORT, is there a way to switch crash logs on 3100?

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              There aren't any options to control crash dumps, what is possible is on by default. So if you have something connected to the serial console logging the output that should get any relevant messages when it happens.

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              styxlS 1 Reply Last reply Reply Quote 0
              • RicoR
                Rico LAYER 8 Rebel Alliance @styxl
                last edited by

                @styxl said in SG-3100 Reboots after FW Rule hits 1TB:

                it will take weeks to reach 1TB

                fetch -o /dev/null http://speedtest.belwue.net/1000G
                😊

                -Rico

                styxlS 1 Reply Last reply Reply Quote 1
                • RicoR
                  Rico LAYER 8 Rebel Alliance
                  last edited by

                  Just checked my SG-3100s, don't have one with 1TB traffic in one Rule atm.
                  But my XG-7100....
                  pfSense_18TB.png

                  -Rico

                  1 Reply Last reply Reply Quote 0
                  • styxlS
                    styxl @jimp
                    last edited by

                    @jimp ok

                    1 Reply Last reply Reply Quote 0
                    • styxlS
                      styxl @Rico
                      last edited by

                      @Rico hehehehe i might try this

                      1 Reply Last reply Reply Quote 0
                      • N
                        NOCling
                        last edited by NOCling

                        No Problem here, SG-3100 runs fine:
                        6fa4a1c0-5227-405a-907d-98c05ab70ecf-image.png

                        Netgate 6100 & Netgate 2100

                        S 1 Reply Last reply Reply Quote 2
                        • styxlS
                          styxl
                          last edited by

                          i found the issue, SNORT was crashing and locking up the device, after removing and re-installing the package it works fine now.

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Logs filled the filesystem?

                            styxlS 1 Reply Last reply Reply Quote 0
                            • styxlS
                              styxl @stephenw10
                              last edited by

                              @stephenw10 not that i can see, i think there was some kind of exception caused by SNORT that used up memory, i realized i hadnt updated my SNORT package in months

                              1 Reply Last reply Reply Quote 0
                              • S
                                SteveITS Galactic Empire @NOCling
                                last edited by

                                We've got one at 14 TB.

                                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                Upvote 👍 helpful posts!

                                1 Reply Last reply Reply Quote 0
                                • C
                                  chrcoluk
                                  last edited by

                                  not same hardware but 1.72 TB on a rule.

                                  pfSense CE 2.8.0

                                  1 Reply Last reply Reply Quote 0
                                  • B
                                    Burner27
                                    last edited by

                                    Whenever I had Snort installed on my SG 3100, it would always cause spontaneous reboots no matter what package version I used. Not sure if it was the way I had it configured, but even with basic rule sets, it would still crash. I have since removed it and have no further issues with reboots.

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.