Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Diagóstico de falha no Kernel no pfsense 2.2.2

    Scheduled Pinned Locked Moved Portuguese
    3 Posts 2 Posters 521 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      moisesdfelix
      last edited by

      Prezados amigos e colegas do grupo, Bom dia!

      Meu Firewall pfsense apresenta um comportamento estranho com travamentos súbitos após algumas semanas de pleno funcionamento. O hardware falha por completo (trava literalmente) sendo necessário um boot para normalização.

      Eu já pensei em diversas possibilidades e em nenhuma delas consegui êxito :(

      • Alteração da QTD de MBUF (Antes estava muito alta)

      • Separar Firewall e Proxy em Máquinas diferentes ;

      • Configurar melhor as opções de Logs de sistema (Não consigo ver o momento da falha)

      PS.: Após o boot notei que o squid tava consumindo quase toda CPU (80%) fiz a limpeza de cache "clear cache in disk" e normalizou.

      Segue o LOG momentos antes e após travamentos.

      Nov 18 06:09:47	kernel: TSC: P-state invariant, performance statistics
Nov 18 06:09:47	kernel: AMD Features2=0x1 <lahf>Nov 18 06:09:47	kernel: AMD Features=0x20100800 <syscall,nx,lm>Nov 18 06:09:47	kernel: Features2=0x40e31d <sse3,dtes64,mon,ds_cpl,tm2,ssse3,cx16,xtpr,pdcm,movbe>Nov 18 06:09:47	kernel: Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>Nov 18 06:09:47	kernel: Origin = "GenuineIntel" Id = 0x106ca Family = 0x6 Model = 0x1c Stepping = 10
Nov 18 06:09:47	kernel: CPU: Intel(R) Atom(TM) CPU D525 @ 1.80GHz (1800.04-MHz K8-class CPU)
Nov 18 06:09:47	kernel: FreeBSD clang version 3.4.1 (tags/RELEASE_34/dot1-final 208032) 20140512
Nov 18 06:09:47	kernel: root@pfs22-amd64-builder:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10 amd64
Nov 18 06:09:47	kernel: FreeBSD 10.1-RELEASE-p9 #0 57b23e7(releng/10.1)-dirty: Mon Apr 13 20:30:25 CDT 2015
Nov 18 06:09:47	kernel: FreeBSD is a registered trademark of The FreeBSD Foundation.
Nov 18 06:09:47	kernel: The Regents of the University of California. All rights reserved.
Nov 18 06:09:47	kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
Nov 18 06:09:47	kernel: Copyright (c) 1992-2014 The FreeBSD Project.
Nov 18 06:09:47	syslogd: kernel boot file is /boot/kernel/kernel
Nov 17 17:04:56	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:04:55	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:04:54	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:02:53	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:02:53	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:02:53	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:02:23	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:02:23	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:02:23	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:01:52	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:01:52	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:01:52	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:01:23	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:01:22	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:01:22	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:00:52	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:00:52	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:00:52	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:00:34	lighttpd[96835]: (request.c.1125) POST-request, but content-length missing -> 411
Nov 17 17:00:23	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:00:22	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:00:22	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 17:00:03	lighttpd[96835]: (request.c.1125) POST-request, but content-length missing -> 411
Nov 17 16:59:53	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 16:59:52	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 16:59:52	lighttpd[96835]: (request.c.1113) GET/HEAD with content-length -> 400
Nov 17 16:59:33	lighttpd[96835]: (request.c.1125) POST-request, but content-length missing -> 411</fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe></sse3,dtes64,mon,ds_cpl,tm2,ssse3,cx16,xtpr,pdcm,movbe></syscall,nx,lm></lahf>
      1 Reply Last reply Reply Quote 0
      • T Offline
        tomaswaldow
        last edited by

        Esta na hora de atualizar isso.

        Tomas @ 2W Consultoria

        1 Reply Last reply Reply Quote 0
        • M Offline
          moisesdfelix
          last edited by

          Bom dia Tomas,

          Eu já estou planejando essa atualização porém antes, preciso ver se não haverá problemas com as pontas remotas já que tenho VPN S2S!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.