Проблема с перезагрузкой pfsense

viktor_g

@bitsoft какое железо/сетевухи?
покажите /var/log/system.log

для профилактики чекните файловую систему:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/filesystem-check.html

bitsoft

@viktor_g said in Проблема с перезагрузкой pfsense:

/var/log/system.log

system.txt

viktor_g

@bitsoft в логе ничего интересного
попробуйте посмотреть сказу после самоперезагрузки
файловую систему прочекали?
ещё неплохо бы проверить память memtest'ом,
похоже на железный глюк

bitsoft

@viktor_g
У меня на новом железе та же проблема, жесткий диск брал новый и после установки pfsens вливал конфиг.

bitsoft

@viktor_g said in Проблема с перезагрузкой pfsense:

файловую систему прочекали?

Буду чекать позно вечером, днем не вариант организация довольно большая, людям работать надобно.

Konstanti

@bitsoft
А что у Вас с подачей питания на устройства ?
По логам видно , что система не перезагружалась корректно
Такое ощущение , что как-будто выключили рубильник , а потом снова включили
Тем более , что Вы говорите , что на новом железе та же проблема

и еще ,
покажите , пож , вывод команды из консоли
dmesg -a

bitsoft

@konstanti said in Проблема с перезагрузкой pfsense:

Такое ощущение , что как-будто выключили рубильник , а потом снова включили

У меня железяка питается от бесперебойника вместе с другими серверами. шкаф серверный заземлен.

bitsoft

@konstanti said in Проблема с перезагрузкой pfsense:

dmesg -a

Copyright (c) 1992-2020 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 11.3-STABLE #243 abf8cba50ce(RELENG_2_4_5): Tue Jun 2 17:53:37 EDT 2020
root@buildbot1-nyi.netgate.com:/build/ce-crossbuild-245/obj/amd64/YNx4Qq3j/build/ce-crossbuild-245/sources/FreeBSD-src/sys/pfSense amd64
FreeBSD clang version 8.0.1 (tags/RELEASE_801/final 366581) (based on LLVM 8.0.1)
VT(vga): resolution 640x480
CPU: Intel(R) Core(TM) i3 CPU 530 @ 2.93GHz (2933.50-MHz K8-class CPU)
Origin="GenuineIntel" Id=0x20655 Family=0x6 Model=0x25 Stepping=5
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0x9ae3bd<SSE3,DTES64,MON,DS_CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,POPCNT>
AMD Features=0x28100800<SYSCALL,NX,RDTSCP,LM>
AMD Features2=0x1<LAHF>
VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID
TSC: P-state invariant, performance statistics
real memory = 2147483648 (2048 MB)
avail memory = 2003075072 (1910 MB)
Event timer "LAPIC" quality 600
ACPI APIC Table: <092410 APIC1014>
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
FreeBSD/SMP: 1 package(s) x 2 core(s) x 2 hardware threads
ioapic0: Changing APIC ID to 6
ioapic0 <Version 2.0> irqs 0-23 on motherboard
SMP: AP CPU #1 Launched!
SMP: AP CPU #2 Launched!
SMP: AP CPU #3 Launched!
Timecounter "TSC-low" frequency 1466747992 Hz quality 1000
ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE.
ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf.
module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff806a2fd0, 0) error 1
ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE.
ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf.
module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff806a3080, 0) error 1
iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE.
iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf.
module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff806ca140, 0) error 1
iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE.
iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf.
module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff806ca1f0, 0) error 1
iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE.
iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf.
module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff806ca2a0, 0) error 1
random: entropy device external interface
ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE.
ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf.
module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff806a2f20, 0) error 1
wlan: mac acl policy registered
kbd1 at kbdmux0
000.000022 [4213] netmap_init netmap: loaded module
module_register_init: MOD_LOAD (vesa, 0xffffffff812d9960, 0) error 19
mlx5en: Mellanox Ethernet driver 3.5.2 (September 2019)
nexus0
vtvga0: <VT VGA driver> on motherboard
cryptosoft0: <software crypto> on motherboard
padlock0: No ACE support.
acpi0: <092410 XSDT1014> on motherboard
acpi0: Power Button (fixed)
cpu0: <ACPI CPU> on acpi0
cpu1: <ACPI CPU> on acpi0
cpu2: <ACPI CPU> on acpi0
cpu3: <ACPI CPU> on acpi0
attimer0: <AT timer> port 0x40-0x43 irq 0 on acpi0
Timecounter "i8254" frequency 1193182 Hz quality 0
Event timer "i8254" frequency 1193182 Hz quality 100
atrtc0: <AT realtime clock> port 0x70-0x71 irq 8 on acpi0
atrtc0: registered as a time-of-day clock, resolution 1.000000s
Event timer "RTC" frequency 32768 Hz quality 0
hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 950
Event timer "HPET" frequency 14318180 Hz quality 550
Event timer "HPET1" frequency 14318180 Hz quality 440
Event timer "HPET2" frequency 14318180 Hz quality 440
Event timer "HPET3" frequency 14318180 Hz quality 440
Event timer "HPET4" frequency 14318180 Hz quality 440
Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pcib0: _OSC returned error 0x10
pci0: <ACPI PCI bus> on pcib0
pcib1: <ACPI PCI-PCI bridge> irq 16 at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
em0: <Intel(R) PRO/1000 Network Connection 7.6.1-k> port 0xbc00-0xbc1f mem 0xfbbe0000-0xfbbfffff,0xfbbc0000-0xfbbdffff irq 16 at device 0.0 on pci1
em0: Using an MSI interrupt
em0: Ethernet address: 00:1b:21:81:75:38
em0: netmap queues/slots: TX 1/1024, RX 1/1024
em1: <Intel(R) PRO/1000 Network Connection 7.6.1-k> port 0xb880-0xb89f mem 0xfbb80000-0xfbb9ffff,0xfbb60000-0xfbb7ffff irq 17 at device 0.1 on pci1
em1: Using an MSI interrupt
em1: Ethernet address: 00:1b:21:81:75:39
em1: netmap queues/slots: TX 1/1024, RX 1/1024
ehci0: <Intel PCH USB 2.0 controller USB-B> mem 0xfbefa000-0xfbefa3ff irq 16 at device 26.0 on pci0
usbus0: EHCI version 1.0
usbus0 on ehci0
usbus0: 480Mbps High Speed USB v2.0
pcib2: <ACPI PCI-PCI bridge> irq 17 at device 28.0 on pci0
pcib2: [GIANT-LOCKED]
pcib3: <ACPI PCI-PCI bridge> irq 17 at device 28.4 on pci0
pci2: <ACPI PCI bus> on pcib3
pcib4: <ACPI PCI-PCI bridge> irq 16 at device 28.5 on pci0
pci3: <ACPI PCI bus> on pcib4
pcib5: <ACPI PCI-PCI bridge> irq 18 at device 28.6 on pci0
pci4: <ACPI PCI bus> on pcib5
em2: <Intel(R) PRO/1000 Network Connection 7.6.1-k> port 0xcc00-0xcc1f mem 0xfbce0000-0xfbcfffff,0xfbcdc000-0xfbcdffff irq 18 at device 0.0 on pci4
em2: Using MSIX interrupts with 3 vectors
em2: Ethernet address: bc:ae:c5:1d:c7:d1
em2: netmap queues/slots: TX 1/1024, RX 1/1024
pcib6: <ACPI PCI-PCI bridge> irq 19 at device 28.7 on pci0
pci5: <ACPI PCI bus> on pcib6
em3: <Intel(R) PRO/1000 Network Connection 7.6.1-k> port 0xdc00-0xdc1f mem 0xfbde0000-0xfbdfffff,0xfbddc000-0xfbddffff irq 19 at device 0.0 on pci5
em3: Using MSIX interrupts with 3 vectors
em3: Ethernet address: bc:ae:c5:1d:c8:9c
em3: netmap queues/slots: TX 1/1024, RX 1/1024
ehci1: <Intel PCH USB 2.0 controller USB-A> mem 0xfbef9000-0xfbef93ff irq 23 at device 29.0 on pci0
usbus1: EHCI version 1.0
usbus1 on ehci1
usbus1: 480Mbps High Speed USB v2.0
pcib7: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci6: <ACPI PCI bus> on pcib7
vgapci0: <VGA-compatible display> port 0xec00-0xec7f mem 0xfb000000-0xfb7fffff,0xfafe0000-0xfaffffff irq 23 at device 5.0 on pci6
vgapci0: Boot video device
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel Ibex Peak SATA300 controller> port 0xac00-0xac07,0xa880-0xa883,0xa800-0xa807,0xa480-0xa483,0xa400-0xa40f,0xa080-0xa08f irq 21 at device 31.2 on pci0
ata2: <ATA channel> at channel 0 on atapci0
ata3: <ATA channel> at channel 1 on atapci0
atapci1: <Intel Ibex Peak SATA300 controller> port 0x9c00-0x9c07,0x9880-0x9883,0x9800-0x9807,0x9480-0x9483,0x9400-0x940f,0x9080-0x908f irq 21 at device 31.5 on pci0
ata4: <ATA channel> at channel 0 on atapci1
ata5: <ATA channel> at channel 1 on atapci1
acpi_button0: <Power Button> on acpi0
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
orm0: <ISA Option ROMs> at iomem 0xc0000-0xc7fff,0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
ppc0: cannot reserve I/O port range
est0: <Enhanced SpeedStep Frequency Control> on cpu0
est1: <Enhanced SpeedStep Frequency Control> on cpu1
est2: <Enhanced SpeedStep Frequency Control> on cpu2
est3: <Enhanced SpeedStep Frequency Control> on cpu3
Timecounters tick every 1.000 msec
ugen0.1: <Intel EHCI root HUB> at usbus0
ugen1.1: <Intel EHCI root HUB> at usbus1
uhub0: <Intel EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus0
uhub1: <Intel EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus1
uhub1: 2 ports with 2 removable, self powered
uhub0: 2 ports with 2 removable, self powered
ugen0.2: <vendor 0x8087 product 0x0020> at usbus0
uhub2 on uhub0
uhub2: <vendor 0x8087 product 0x0020, class 9/0, rev 2.00/0.00, addr 2> on usbus0
ugen1.2: <vendor 0x8087 product 0x0020> at usbus1
uhub3 on uhub1
uhub3: <vendor 0x8087 product 0x0020, class 9/0, rev 2.00/0.00, addr 2> on usbus1
uhub2: 6 ports with 6 removable, self powered
uhub3: 8 ports with 8 removable, self powered
ada0 at ata3 bus 0 scbus1 target 0 lun 0
ada0: <FOXLINE FLSSD256X5 SBFMP1.3> ACS-4 ATA SATA 3.x device
ada0: Serial Number 202008276896
ada0: 300.000MB/s transfers (SATA 2.x, UDMA5, PIO 8192bytes)
ada0: 244198MB (500118192 512 byte sectors)
Trying to mount root from ufs:/dev/ufsid/60153c2c218b011c [rw,noatime]...
WARNING: / was not properly dismounted
WARNING: /: mount pending error: blocks 8 files 2
Configuring crash dumps...
Using /dev/label/swap0 for dump device.
** SU+J Recovering /dev/ufsid/60153c2c218b011c
** Reading 33554432 byte journal from inode 4.
** Building recovery table.
** Resolving unreferenced inode list.
** Processing journal entries.
** 208 journal records in 16896 bytes for 39.39% utilization
** Freed 17 inodes (0 dirs) 53 blocks, and 23 frags.

***** FILE SYSTEM MARKED CLEAN *****
Filesystems are clean, continuing...
Mounting filesystems...
random: unblocking device.

__

_ __ / |__ ___ _ __ ___ ___
| '_ \134| |/ _|/ _ \134 ' \134/ __|/ _ \134
| |) | \134_ \134 / | | \134 \134 /
| ./|| |/\134_|| ||/\134|
|_|

Welcome to pfSense 2.4.5-RELEASE (Patch 1)...

savecore: reboot after panic: page fault
savecore: writing core to /var/crash/textdump.tar.2
...ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg /usr/local/lib/ipsec /usr/local/lib/perl5/5.30/mach/CORE
32-bit compatibility ldconfig path:
done.

Removing vital flag from php72... done.
External config loader 1.0 is now starting... ada0s1 ada0s1a ada0s1b
Launching the init system...Updating CPU Microcode...
CPU: Intel(R) Core(TM) i3 CPU 530 @ 2.93GHz (2933.50-MHz K8-class CPU)
Origin="GenuineIntel" Id=0x20655 Family=0x6 Model=0x25 Stepping=5
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0x9ae3bd<SSE3,DTES64,MON,DS_CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,POPCNT>
AMD Features=0x28100800<SYSCALL,NX,RDTSCP,LM>
AMD Features2=0x1<LAHF>
Structured Extended Features3=0x9c000000<IBPB,STIBP,L1DFL,SSBD>
VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID
TSC: P-state invariant, performance statistics
Done.
...... done.
Initializing.................. done.
Starting device manager (devd)...done.
Loading configuration......done.
Updating configuration...done.
Checking config backups consistency.................................done.
Setting up extended sysctls...done.
Setting timezone...done.
Configuring loopback interface...
lo0: link state changed to UP
done.
Starting syslog...done.
Starting Secure Shell Services...done.
Setting up interfaces microcode...done.
Configuring loopback interface...done.
Creating wireless clone interfaces...done.
Configuring LAGG interfaces...done.
Configuring VLAN interfaces...done.
Configuring QinQ interfaces...done.
Configuring IPsec VTI interfaces...done.
Configuring WAN interface...done.
Configuring ADMINISTRACIYA interface...done.
Configuring MIS interface...done.
Configuring SATELITE interface...done.
Configuring CARP settings...done.
Syncing OpenVPN settings...
tun1: changing name to 'ovpns1'
ovpns1: link state changed to UP
tun2: changing name to 'ovpns2'
ovpns2: link state changed to UP
done.
pflog0: promiscuous mode enabled
Configuring firewall.....0 addresses deleted.
0 addresses deleted.
.done.
Starting PFLOG...done.
Setting up gateway monitors...done.
Setting up static routes...
em1: link state changed to UP
em0: link state changed to UP
done.
Setting up DNSs...
Starting DNS forwarder...done.
Synchronizing user settings...
em3: link state changed to UP
em2: link state changed to UP
done.
Starting webConfigurator...done.
Configuring CRON...done.
Starting NTP time client...done.
Starting DHCP service...done.
Configuring firewall.....0 addresses deleted.
0 addresses deleted.
0 addresses deleted.
0 addresses deleted.
.done.
Configuring l2tp VPN service... done
Configuring IPsec VPN... done
Generating RRD graphs...done.
Starting syslog...done.
Starting CRON... done.
pfSense 2.4.5-RELEASE (Patch 1) amd64 Tue Jun 02 17:51:17 EDT 2020
Bootup complete
arp: 192.168.0.18 moved from 50:50:a4:ee:80:12 to 54:7f:54:e6:e4:88 on em1
arp: 192.168.0.18 moved from 54:7f:54:e6:e4:88 to 50:50:a4:ee:80:12 on em1
arp: 172.168.1.171 moved from bc:5f:f4:e7:4b:71 to 00:1d:60:db:4d:f3 on em3
arp: 172.168.1.171 moved from 00:1d:60:db:4d:f3 to bc:5f:f4:e7:4b:71 on em3

Konstanti

@bitsoft said in Проблема с перезагрузкой pfsense:

Welcome to pfSense 2.4.5-RELEASE (Patch 1)...
savecore: reboot after panic: page fault
savecore: writing core to /var/crash/textdump.tar.2

savecore: reboot after panic: page fault
savecore: writing core to /var/crash/textdump.tar.2

показывайте этот файл

и похоже , что есть проблемы с файловой системой (надо проверять , как говорили выше )

WARNING: / was not properly dismounted
WARNING: /: mount pending error: blocks 8 files 2

и еще - у Вас еще , вероятно, есть устройства в сети с одинаковыми IP адресами

arp: 192.168.0.18 moved from 50:50:a4:ee:80:12 to 54:7f:54:e6:e4:88 on em1
arp: 192.168.0.18 moved from 54:7f:54:e6:e4:88 to 50:50:a4:ee:80:12 on em1
arp: 172.168.1.171 moved from bc:5f:f4:e7:4b:71 to 00:1d:60:db:4d:f3 on em3
arp: 172.168.1.171 moved from 00:1d:60:db:4d:f3 to bc:5f:f4:e7:4b:71 on em3

bitsoft

@konstanti said in Проблема с перезагрузкой pfsense:

показывайте этот файл

textdump.tar.txt

bitsoft

@konstanti said in Проблема с перезагрузкой pfsense:

и еще - у Вас еще , вероятно, есть устройства в сети с одинаковыми IP адресами

Сейчас разберемся. Как я смогу Вас отблагодарить?

Konstanti

@bitsoft
Никак ) Спасибо если очень хочется сделать что-то нужное , то лучше отправить )) это в благотворительный фонд

По файлу , который Вы представили
Проблема в подсистеме Netgraph - вы используете l2tp соединение ( ее использует демон mpd )
процесс ng_queue
Почему она возникает , пока непонятно

bitsoft

@konstanti said in Проблема с перезагрузкой pfsense:

Проблема в подсистеме Netgraph - вы используете l2tp соединение ( ее использует демон mpd )

Сейчас его потушим. Им уже давно ни кто не пользуется

bitsoft

@konstanti said in Проблема с перезагрузкой pfsense:

Никак ) Спасибо если очень хочется сделать что-то нужное , то лучше отправить )) это в благотворительный фонд

Хорошо мы тогда отделом в Наш родильный дом малышам оставшимся без родителей что нибудь соберем от Вашего имени))))))

Konstanti

@bitsoft Хорошо
Если "падения" продолжатся , то снова надо будет показать здесь содержимое файла textdump.tar.txt для анализа .

bitsoft

Коллеги Всем ОГРОМНОЕ СПАСИБИЩЕ. Ваши советы помогли. Как и обещал в родильный дом для малышей сумку собрали и передали. Еще раз ОГРОМНОЕ СПАСИБО!!!!!!!