# of processes increase until unresponsive



  • Hi!

    Got this very strange behavior on an 2.4.2 hosted as guest in an Hyper-V.
    Only one package added and configured. Pfblocker. Everything up to date.

    Looks like processes are spawning until pfsense no longer respond. I could shut it down gracefully but it took a while. And ALLOT of sync to disk and buffers were shown.

    I've not dug deeply into this one yet. Need some advise how to identify which process is spawning, multiplying it self.

    The monitoring (external PRTG) as attached PNG.

    
    ps -el
    
    UID   PID  PPID CPU PRI NI   VSZ  RSS MWCHAN STAT TT     TIME COMMAND
      0 20687     1   0  52  0 39436 2840 wait   Is   v0  0:00.01 TERM=xterm login [pam] (login)
      0 22994 20687   0  52  0 13084 2932 wait   I    v0  0:00.00 USER=root LOGNAME=root HOME=/root SHELL=/bin/sh BLOCKSIZE=K MAIL=/var/mail/root PATH=/sbin:/bin:/usr/sbin
      0 23826 22994   0  52  0 13084 2808 ttyin  I+   v0  0:00.00 LOGNAME=root MAIL=/var/mail/root PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/
      0 44507     1   0  52 20 13084 2636 wait   SN   v0- 0:00.59 PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin OLDPWD=/ fcgipath=/var/run/php-fpm.sock
      0 20979     1   0  52  0 10388 2132 ttyin  Is+  v1  0:00.00 TERM=xterm /usr/libexec/getty Pc ttyv1
      0 21242     1   0  52  0 10388 2132 ttyin  Is+  v2  0:00.00 TERM=xterm /usr/libexec/getty Pc ttyv2
      0 21484     1   0  52  0 10388 2132 ttyin  Is+  v3  0:00.00 TERM=xterm /usr/libexec/getty Pc ttyv3
      0 21754     1   0  52  0 10388 2132 ttyin  Is+  v4  0:00.00 TERM=xterm /usr/libexec/getty Pc ttyv4
      0 22016     1   0  52  0 10388 2132 ttyin  Is+  v5  0:00.00 TERM=xterm /usr/libexec/getty Pc ttyv5
      0 22298     1   0  52  0 10388 2132 ttyin  Is+  v6  0:00.00 TERM=xterm /usr/libexec/getty Pc ttyv6
      0 22355     1   0  52  0 10388 2132 ttyin  Is+  v7  0:00.00 TERM=xterm /usr/libexec/getty Pc ttyv7
      0  6830  6874   0  20  0 21108 2724 -      R+    0  0:00.00 SSH_CLIENT=10.0.40.2 55577 22 LOGNAME=admin MAIL=/var/mail/admin PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/
      0  6874 95762   0  20  0 13396 3592 pause  S     0  0:00.03 SSH_CLIENT=10.0.40.2 55577 22 LOGNAME=admin MAIL=/var/mail/admin PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/
      0 95762 49695   0  52  0 13084 2808 wait   Is    0  0:00.00 USER=admin LOGNAME=admin HOME=/root MAIL=/var/mail/admin PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sb
    
    
    
    crontab
    
    # /etc/crontab - root's crontab for FreeBSD
    #
    # $FreeBSD$
    #
    SHELL=/bin/sh
    PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin
    #
    #minute hour    mday    month   wday    who     command
    #
    #*/5    *       *       *       *       root    /usr/libexec/atrun
    #
    # Save some entropy so that /dev/random can re-seed on boot.
    #*/11   *       *       *       *       operator /usr/libexec/save-entropy
    #
    # Rotate log files every hour, if necessary.
    #0      *       *       *       *       root    newsyslog
    #
    # Perform daily/weekly/monthly maintenance.
    #1      3       *       *       *       root    periodic daily
    #15     4       *       *       6       root    periodic weekly
    #30     5       1       *       *       root    periodic monthly
    #
    # Adjust the time zone if the CMOS clock keeps local time, as opposed to
    # UTC time.  See adjkerntz(8) for details.
    #1,31   0-5     *       *       *       root    adjkerntz -a
    #
    # pfSense specific crontab entries
    # Created: November 30, 2017, 6:55 pm
    #
    
    1,31    0-5     *       *       *       root    /usr/bin/nice -n20 adjkerntz -a
    1       3       1       *       *       root    /usr/bin/nice -n20 /etc/rc.update_bogons.sh
    */60    *       *       *       *       root    /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout
    */60    *       *       *       *       root    /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout
    1       1       *       *       *       root    /usr/bin/nice -n20 /etc/rc.dyndns.update
    */60    *       *       *       *       root    /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot
    30      12      *       *       *       root    /usr/bin/nice -n20 /etc/rc.update_urltables
    1       0       *       *       *       root    /usr/bin/nice -n20 /etc/rc.update_pkg_metadata
    */5     *       *       *       *       root    /usr/local/bin/vnstat -u
    0       4       1-7     *       *       root    /usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php dcc >> /var/log/pfblockerng/extras.log 2>&1
    0       *       *       *       *       root    /usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php cron >> /var/log/pfblockerng/pfblockerng.log 2>&1
    #
    # If possible do not add items to this file manually.
    # If done so, this file must be terminated with a blank line (e.g. new line)
    #
    
    ```![2017-11-30_19-02-20.png](/public/_imported_attachments_/1/2017-11-30_19-02-20.png)
    ![2017-11-30_19-02-20.png_thumb](/public/_imported_attachments_/1/2017-11-30_19-02-20.png_thumb)

  • Moderator

    Can you try the following patch?
    https://forum.pfsense.org/index.php?topic=110515.60



  • Patch applied 1h ago.  :o
    I've set an alarm if processes goes high than 200 …
    But, it all look good even before the patch. The increase in process didn't go up as before the restart.
    See attached png. Arrow is aprox when patch was applied.




  • Still no increase in processes. Don't know what fixed it, the restart or the patch.



Log in to reply