Log Browser always empty
-
Version: pfBlockerNG-devel 3.0.0_5
In the Log Browser section, no matter what combination of "Log/File type" and "Log/File selection" I select, the Log window is always empty.
Did I misconfigure something? Any suggestion?
-
And what are you picking for the section?
It will show you what log file you loaded - not all of them will always exist
-
@johnpoz
Thanks for you're response.
As per my initial post, whatever I pick, it's empty.I went ahead and replicated your screenshot - it was empty.
Although I did notice that your "Log/FIle Details" section populates with the path to the file that is being loaded, which I have never seen before.
Is it possible that log file creation/reading is not set up properly on my system?
-
@sebm what specific parts of pfblocker have you setup? Is it running? You have it enabled?
For example - I am only using it for aliases, etc.. So some sections are not there in the logs
-
@johnpoz
I confirm: pfBlockerNG is enabled and running.- DNSBL is enabled and running, with the appropriate groups I need
- IP section is configured, and MaxMind GeoIP set up
- Feeds are enabled
The Reports section populates with data for DNSBL and IP, and I've been successfully whitelisting domains for a while. In addition the dashboard widget displays ongoing activity as expected.
Please note:
I noticed that on your last screenshot, it tells you when the log file is empty or does not exit - as per my initial screenshot, no matter what I select, the section "Log/File Details" also remain empty. -
@sebm I have exactly the same problem as sebm. The files always appear empty and the section of the page for log file/details is always empty. I believe that it used to work for me at some point in the past but hasn’t recently. I’m on the 3.0 series - may not be quite up to date and on current pfSense.
-
@sebm Go to the shell or Diagnostics / Command prompt :
ls -al /var/log/pfblockerng total 41989 drwxr-xr-x 2 unbound unbound 13 Dec 15 17:15 . drwxr-xr-x 7 root wheel 30 Oct 2 19:39 .. -rw------- 1 unbound unbound 56569458 Dec 15 18:22 dns_reply.log -rw------- 1 unbound unbound 12481370 Dec 15 18:19 dnsbl.log -rw------- 1 unbound unbound 3320732 Mar 29 2019 dnsbl.log_old -rw------- 1 root wheel 15909775 Dec 15 17:15 dnsbl_parsed_error.log -rw------- 1 root wheel 626075 Dec 15 17:15 error.log -rw------- 1 root wheel 180038 Dec 15 17:15 extras.log -rw------- 1 root wheel 20548660 Dec 15 18:21 ip_block.log -rw------- 1 root wheel 330794 Dec 15 17:15 ip_permit.log -rw-r--r-- 1 root wheel 120 Dec 10 04:00 maxmind_ver -rw------- 1 root wheel 10299841 Dec 15 17:15 pfblockerng.log -rw-r--r-- 1 unbound unbound 0 Oct 2 18:53 py_error.log
-
^ Exactly.. good check!
-
@ronpfs Thanks for your comment.
This is the output I get for that command:total 13696 drwxr-xr-x 2 root wheel 512 Dec 15 15:10 . drwxr-xr-x 7 root wheel 1024 Jun 2 2020 .. -rw------- 1 root wheel 2382734 Dec 15 15:24 dnsbl.log -rw------- 1 root wheel 16336 Dec 15 15:01 dnsbl_parsed_error.log -rw------- 1 root wheel 664071 Dec 15 15:10 error.log -rw------- 1 root wheel 3331 Dec 15 15:01 extras.log -rw------- 1 root wheel 3011054 Dec 15 15:01 ip_block.log -rw-r--r-- 1 root wheel 120 Dec 13 15:01 maxmind_ver -rw------- 1 root wheel 730595 Dec 15 15:01 pfblockerng.log
-
@sebm Well you should be able to view those.. call up say the maxmind ver
Your not logged in as some other account other than admin into the webgui are you?
-
tail /var/log/pfblockerng/pfblockerng.log [ SCANR_Shodan_v4 ] exists. [ SCANR_ISC_Onyphe_v4 ] exists. [ DNSBLIP_v4 ] exists. ===[ Aliastables / Rules ]========================================== No changes to Firewall rules, skipping Filter Reload No Changes to Aliases, Skipping pfctl Update UPDATE PROCESS ENDED
Then check System log, Console to see if any errors are displayed.
No Crash report in the Dashboard ? -
@johnpoz I confirm being logged in as admin, and do not even have other users created.
I tried to open that very file after having enabled MaxMind the other day, before posting here.
Here's the sad screenshot of what I see:
-
Can you try it with a different browser? Are you using any sort of addons in your browser that could block stuff?
-
@ronpfs There you go my friend:
Shell Output - tail /var/log/pfblockerng/pfblockerng.log
Alias table IP Counts ----------------------------- 22091 /var/db/aliastables/pfB_PRI1_v4.txt pfSense Table Stats ------------------- table-entries hard limit 400000 Table Usage Count 140261 UPDATE PROCESS ENDED [ 12/15/20 15:01:40 ]
I don't see any errors in Status / System Logs / System / General
No crash report in Dashboard that I can see.
-
@sebm Try F5 or CTRL-F5 to refresh the code.
Maybe something went wrong last time you upgraded. Disable pfBlockerNG, reinstall pfBlockerNG, enable pfBlockerNG.
-
@johnpoz I use Safari and have no Extensions enabled.
Just tried the same with a clean Firefox, same problem.
Nothing in the Log/File Details or Log sections...Should I try a reboot?
-
@ronpfs said in Log Browser always empty:
Maybe something went wrong last time you upgraded. Disable pfBlockerNG, reinstall pfBlockerNG, enable pfBlockerNG.
As suggested:
- disabled
- uninstalled
- re-installed
- re-enabled
Same problem...
-
@sebm You can view files with Diagnostics / Edit File tab.
You can also download File with the Diagnostics / Command Prompt tab. -
@sebm said in Log Browser always empty:
Should I try a reboot?
FYI,
I did the unimaginable after a 120 days uptime: rebooted.
Same problem persists... -
@ronpfs said in Log Browser always empty:
@sebm You can view files with Diagnostics / Edit File tab.
You can also download File with the Diagnostics / Command Prompt tab.That's right my friend: I confirm I was able to open or download any files from the /var/log/pfblockerng/ folder using these two methods.
Is that your subtle way to say "forget about it", use a workaround?
-
@sebm What version of pfsense ? No disk full ?
-
@sebm said in Log Browser always empty:
Is that your subtle way to say "forget about it", use a workaround?
It's a way for you to inspect log files until @BBcan177 find time to read your post.
-
@ronpfs said in Log Browser always empty:
@sebm What version of pfsense ? No disk full ?
pfSense 2.4.5-RELEASE-p1 (amd64)
pfBlockerNG-devel 3.0.0_5
I have 450GB of space left@ronpfs said in Log Browser always empty:
It's a way for you inspect log files until @BBcan177 find time to read your post.
It is what it is I suppose. I sure appreciate your time trying to help!
Should I try to install version 3.0.0_6?
-
As stated before, I have exactly the same problem. I am running
2.4.5-RELEASE-p1 (amd64)pfBlockerNG-devel net 3.0.0_3
which obviously needs updating to _5 or is it _6 now?
I can see all the log files in the /var directory and access them directly via the diagnostics / edit file, but not via the pfBlockerNG menus.
I am running on a PC Engines APU2 device with a relatively small SSD but I do not have much used disk space:
Disk usage:
/
8% of 11GiB - zfs
/tmp
0% of 10GiB - zfs
/var
8% of 11GiB - zfs
/zroot
0% of 10GiB - zfs
/var/run
5% of 3.4MiB - ufs in RAMThis is more annoying than anything else. PfBlocker is clearly working and the logs show nothing strange (at least to my eyes).
The tail of my pfblockerng.log reads ....
Database Sanity check [ PASSED ]
Masterfile/Deny folder uniq check
Deny folder/Masterfile uniq checkSync check (Pass=No IPs reported)
Alias table IP Counts
21104 total
21067 /var/db/aliastables/pfB_PRI1_v4.txt
37 /var/db/aliastables/pfB_PRI1_6_v6.txtpfSense Table Stats
table-entries hard limit 400000
Table Usage Count 139282UPDATE PROCESS ENDED [ 12/16/20 10:00:20 ]
-
And your seeing the same blank file section?
If not showing you which log file its trying to open or that is doesn't exist.. Points to reason being blank is its not trying to even open anything.
Could be a browser side problem..
-
@johnpoz said in Log Browser always empty:
Could be a browser side problem..
Note : I'm not seeing any issues.
It's the user, by selecting the "Log/File type" and then "Log/File selection" a fires a POST against the pfSense WebGUI/pfblockerng_log.php - ajax does it's job, and returns the info.
Nothings special, exactly the same thing is happening on the dashboard page (does your auto refresh work ?) , and other pfSense WebGUI pages.edit : even this forum.netgate.com is using ajax heavily, right now, while your reading and typing.
I tried some basic "ajax" debugging with my browser (Firefox) as they all have some 'web development' functionalities integrated.
Hit Shift-Ctrl-E to access the "network" part direcly.
It will show up at the bottom.
Now, open the Firewall > pfBlockerNG > Log Browser page.
Select your file.You will (should) see this at the bottom of the network-log-list-windows :
Clickint twice on this line will show the content being send from the webGUi to the browser (the file itself is base64 encoded).
/maxmind_ver|TWF4TWluZCBHZW9MaXRlMiBEYXRlL1RpbWUgU3RhbXAKTGFzdC1Nb2RpZmllZDogV2VkLCAwOSBEZWMgMjAyMCAxOTo0MDo1NSBHTVQKRHVwbGljYXRlIFJlcHJlc2VudGVkIElQNCBOZXR3b3JrczogNzgyNTUK|
You see the same thing ?
-
@gertjan Not seeing any issues here either can not duplicate this problem. So its clearly not some issue in pfblocker that presents itself to everyone.
Since the logs are there.. And they can access them and they have info in them - I would look to see if browser related. Are you seeing the same issue on all browsers? Without any addons, etc.
I can not duplicate the problem - so its something specific to their setup, and since files are there and can be read - I would validate not a browser issue.
-
@johnpoz Yes I have that same blank section that was reported by sebM.
I normally use Safari, but get the same behaviour using Firefox.
-
@stepheng did you saw the 'interaction' I showed above ?
-
@gertjan I looked at the developer mode stuff (on both Safari and Firefox) and didn't see any traffic happening at all on the log page, beyond the initial load of the page.
Interestingly, on my rather old MacBook Pro, it doesn't work under Safari, but it does work correctly under Firefox.
... and as a third data point, it does work although a bit clunky on my iPad (it takes forever to load initially - one seems to need to give it some encouragement my selecting a different log file like the error.log and then it seems to work fine with the reload button.
I really don't know what it different about this iMac (running Catalina - it is probably the "cleanest" of my machines with the fewest add-ons and plug-ins as it is the newest and I've been very ruthless in not adding software that I don't think I actually need whereas my MacBookPro is about 10 years old and full of cruft.
I know that Safari can sometimes be a bit temperamental, but I've not seen anything quite of this nature before - I have seen the odd problem with CSS files being interpreted differently to other browsers. Firefox is my goto for such sites and I tend to use as my reference.
-
@stepheng The only 'native' Safari device I have, is an iPhone.
I used it's build in Safari to access the pfBlokcerNG-devel (3.0.0.6 now) logs and it was .... awkward.Managed to see 3 lines MaxMind logs, but had to change both log type and file somewhat randomly.
It's a browser issue.
-
Very browser related.
I gave up using Safari to read logs.
Firefox on my Mac works, or kind of... The trick is to first select "maxmind_ver" or "wizard" on the list and only then go to "dnsbl" or "ip_block" logs. Going straight to the last one doesn't work generally speaking.
-
@huskerdu said in Log Browser always empty:
Very browser related.
I gave up using Safari to read logs.
Firefox on my Mac works, or kind of... The trick is to first select "maxmind_ver" or "wizard" on the list and only then go to "dnsbl" or "ip_block" logs. Going straight to the last one doesn't work generally speaking.
Hey! I confirm the behavior.
I couldn't get anywhere with Safari.
But with Firefox, if I do that little "back and forth" between selected files as you described, it works... -
@sebm @HuskerDu @Gertjan Thanks for all the replies. It looks like we all have much the same experience that for whatever reason Safari does not play well with this, and even Firefox requires a bit of forward and back playing. I'm glad I'm not the only one!
As an occasional web developer, I'm always looking out for odd behaviours - some of which I can never quite get to the bottom of with some browser versions / OS version combinations, so I'm not entirely surprised.
-
Clicking like a maniac in Firefox is the solution. You can mark the topic as solved ;-).
-
Just bumping this thread to highlight that v3.0.0_7 (despite having changelog saying "2) Fix issues with Safari browser and log file selection") didn't fix my problem with Safari.
-
@sebm said in Log Browser always empty:
Safari browser
Desktop or iPad / iPhone (using iOS 14.3 ?)
Using my iPhone and Safari, after changing Log/File selection from "Clixk to select log fie" to, example, "pfblockerng.log", the file is shown :
-
@gertjan Thank you for you're input.
It also works for me on iOS.
But on macOS 11.1 with Safari 14.0.2, it doesn't work.
-
@sebm said in Log Browser always empty:
@gertjan Thank you for you're input.
It also works for me on iOS.
But on macOS 11.1 with Safari 14.0.2, it doesn't work.If you hit F12 and open Dev tools, goto "Console", do you see any errors? Do you have any Browser Add-on's installed?
-
@bbcan177 said in Log Browser always empty:
If you hit F12 and open Dev tools, goto "Console", do you see any errors? Do you have any Browser Add-on's installed?
No console errors, and no extensions installed... :(