pfSense Crash diagnose
-
@stephenw10 Hi Stephen how do I send you the config file in a safe way? What do I need to sanitize? I do have radius on my server, should I remove that part of the xml? And what about the admin password is that stored on the xml backup?
I have one WAN interface, and one intel with 4 nics for the internal part, and is an old Dell desktop (those mini ones) that I can give you more specs, 16Gb of RAM. I had a ssd that failed before, but now it was working with a normal drive (but again failing)
The interesting thing is that this was only failing when that network that was being shaped was under heavy usage (probably reaching the limit of CBQ?)
Thanks -
We probably don't need the full config but I can PM you something.
Just the details of VLAN in question and the shaper queues that were defined on it.
Steve
-
@stephenw10 Sorry I was sure I sent you the config! Just to let you know that I reenabled QOS on that interface, and had a crash again... here is the config (what I think should be relevant)
(attached tried to post here but got rejected by anti spam)config.xmlThank you so much for your time!!! And let me know If I need to send you anything else
-
igb1.2 is not in that config. Which interface did you enable it on to cause the crash?
Using the same queues that are on the other interfaces?
Steve
-
@stephenw10 Sorry I tried to copy/paste but didn't work too well. Here is my actual config
I have QOS disabled now so it doesn't crash
Thanks again!
-
I was able to get the config OK it's just that it doesn't have the VLAN igb1.2 in it and it looks like that is what caused the crash.
Can I assume you had that configured the same as the other VLANs? Same traffic shaping queues on it?Steve
-
@stephenw10 Good you noticed and yes I was using the VLAN2 on igb1 (second interface on a 4 port 1Gbps interface) but not on my normal interfaces
I can send you the whole .XML if you tell me how to sanitize not to send usernames/passwords if that will help
-
What I have should be enough if the queues were the same.
However you can get the sanitised config as part of the status file by going directly to:
[your firewall IP]/status.phpNothing special about igb1? igb0 is also a port on the same card?
Steve
-
@stephenw10 status_output.tgz
There you have it. Yes igbo, 1, 2 and 3 is just one card (supposedly intel but bought on ebay)
I was trying to use igb1.2 as a bridge with igb0.2, but crashes happened before I started playing with that configuration -
OK cool, so you had not added the bridge when it crashed?
-
@stephenw10 No I didn't have it in the initial crashes (the bridge). Well almost sure. This is my home so this is the only place where I don't document changes (oops) -
When it was failing badly (I guess more when I was trying to add a bridge to do some port mirroring as well), I did a change of hardware.
Then it seemed okay, but just for a while.
The only consistent result (and no crashes) I have is when I have shaping completely off (with the old or new hardware)Should I remove the VLAN on igb1 and try again to add shaping to see what happens?
-
Let me try to replicate it with the values I have first.