States tab missing data

[LostInIgnorance]

@rschell

Can you define "My vm version that I build myself.." a little bit more? Maybe there is something on a upgrade to packages that happens differently.

I also don't know that it is configuration related as I have two different devices. One running CE and one running the Plus image. Both items are experiencing the issues. The versions for both are listed below that I am currently running.

Netgate SG-1100:
21.05-DEVELOPMENT (arm64)
built on Wed Apr 28 08:21:53 EDT 2021
FreeBSD 12.2-STABLE

Custom Build:
2.6.0-DEVELOPMENT (amd64)
built on Wed Apr 28 08:21:56 EDT 2021
FreeBSD 12.2-STABLE

[A Former User]

@lostinignorance My changes from the posted source are:

• pfSense - Remove NTPd pool placeholders from the NTP status page (cosmetic)
  - Modify the RADVD reload from a "HUP" signal to a shutdown/restart
• FreeBSD-src - no significant changes except to create a local build
• FreeBSD-ports - Add the filterlog port and fix a filterlog build issue.

The purpose of the process was to fix a 6RD issue and testing FreeBSD version 12 on 2.4 before 2.5 was widely available. I have been just doing it since. Most of the necessary changes have been fixed or incorporated now.

[mfld]

I encountered this, too after upgrading some instances from 2.5.1 Release to

2.6.0.a.20210513.0100
2.6.0.a.20210514.0100
2.6.0.a.20210515.0100

All are effected

login-to-view

This needs to be on redmine IMO.

[A Former User]

@mfld I'm also on 2.6.0.a.20210515.0100 and I'm not having this issue:

login-to-view

So I think more information will be necessary to sort this out, as you can see my rules are quite basic.

[mfld]

@rschell Interesting. Let's start poking around then and compare notes re: setups.

Where I have seen it, the systems are KVM virtualized, single WAN interface (vtnet0). One OpenVPN interface. No floating rules, no policy routing. NAT-Outbound set to hybrid.

They did at some stage have 2.5.1-DEV with WireGuard which was then removed when they went 2.5.1-Release.

I will try doing a fresh install of 2.6.0-dev from https://snapshots.netgate.com/amd64/pfSense_master/installer/ and restoring the .xml to see if that cleans things up somehow. Where does one obtain install images for dev snapshots ?

[Patch]

@mfld said in States tab missing data:

This needs to be on redmine IMO.

Sound similar to State counters not updating and always show 0/0 since last few updates
But also appears to be more directly in redmine now 2.6.0-DEVELOPMENT - state and byte counters on firewall rules tabs are all 0 zerotext

[mfld]

Seems fixed in Version 2.6.0.a.20210521.0100 !

Anyone on 2.6.0.a.20210521.0100 or later still seeing this, please get into redmine to let them know. On my end, it's all good now.

[mfld]

Issue is back with 2.6.0.a.20210604.0100

All zeroes...

[jimp]

There was a new pf merge unrelated to the old one, so the problem on 2.6.0 snapshots is new and without more debugging we can't say if it has a similar cause or fix to the previous issue. 2.5.2 is OK on the current snapshot, but it's about to get the same pf merge 2.6.0 has so it will likely be affected unless we fix it before the next build.

https://redmine.pfsense.org/issues/11994

[wizzkidstef]

Not sure what the status of this issue is, but it seems to be an issue fir me, on build 2.6.0.a.20210806.0500

Are there any logs you need me to upload?

login-to-view

login-to-view

[jimp]

I can't seem to replicate that here on current snapshots on any of my systems, but we did have someone else internally report the same problem yesterday.

Do you have any state data under Diagnostics > States?

If you run pfctl -vvsr do you see counts on rules you expect to be hit?

[jimp]

Looks like somehow your pfSense PHP module may be out of sync with the kernel and needs reinstalled.

Try this from a shell prompt (console or SSH, not GUI):

pkg upgrade -fy php74-pfSense-module; /etc/rc.php-fpm_restart; /etc/rc.restart_webgui

[wizzkidstef]

@jimp Thanks. That helped... however when I go to states it now looks like this, and doesn't show anything if you select anything other than 'All' for interfaces

login-to-view

[jimp]

ok, that's a different problem. I'm seeing that on systems here as well. Likely a similar cause, a mismatch between kernel and the sources for pfctl or similar, but since that's all in base it's unlikely to have an easy temporary workaround until we fix it in the builds.

[wizzkidstef]

Alright, no worries. Thanks again for your help. Did you need me to submit a bug report on redmine?

[jimp]

No, that's ok. I'm working on one right now since it's easy for us to reproduce, but I'm still gathering some data for it so I know more about when it happens.