filter_reload_status filling /var/run directory



  • Hello everyone,

    I have been stuck for 2 days trying to fix this issue.

    My /var/run/ is full due to the filter_reload_status file.

    I have removed the file a few times, but it comes back as expected.

    I am running a VM with the following configuration in VMware Workstation 14.

    pfSense 2.4.4-RELEASE-p1 (amd64)
    FreeBSD 11.2-RLEASE-p4
    RAM: 4GB
    CPU: 1 x 2
    Virtual Disk: 40GB
    2 x Network Adapters

    I have tried:
    https://www.pakjiddat.pk/articles/view/33/high-cpu-problems-with-pfsense
    https://community.spiceworks.com/topic/2125706-filter-reload-errors-there-were-error-s-reloading-the-rules
    ---> for this second, mine was default at 2.000.000 and I changed to 4.000.000

    Any suggestion in how to fix it?



  • @AguianldoSilva said in filter_reload_status filling /var/run directory:

    Any suggestion in how to fix it?

    Fix what ?
    The file /var/run/filter_reload_status is recreated every time when ... well .... filters are reloaded - a message clearly indictaed in the GUI on several screens.
    Mine is about 9 k right now.

    What's wrong with yours ?
    What in it ?

    Ok to remove the file, it's just a write down what the filter reload process did.



  • Hi Gertjan,

    The thing is my /var/run has only 3.4 MB and is always running over 100% use.

    For example, I can't properly restart my pfSense, because I get the message ".../var/run filesystem full"

    Also, my logs show:

    pid 59854 (php-fpm), uid 0 inumber 19 on /var/run: filesystem full.



  • filter_reload_status is that big ?
    What in your /var/run ?

    [2.4.4-RELEASE][admin@pfsense.brit-hotel-fumel.net]/root: ls -al -S  /var/run
    total 168
    -rw-r--r--   1 root   wheel     8683 Apr  3 16:32 filter_reload_status
    drwxr-xr-x   5 root   wheel     2048 Apr  4 01:17 .
    drwxr-xr-x  32 root   wheel      512 Dec 12 13:42 ..
    drwxrwxr-x   2 root   operator   512 Mar 29 19:10 .snap
    drwxr-xr-x   2 avahi  avahi      512 Mar 29 19:11 avahi-daemon
    drwxr-xr-x   2 root   wheel      512 Mar 29 19:11 munin
    -rw-r--r--   1 root   wheel      394 Apr  4 01:23 utx.active
    -r--r--r--   1 root   wheel      284 Mar 29 19:10 ld-elf.so.hints
    -r--r--r--   1 root   wheel      139 Mar 29 19:10 ld-elf32.so.hints
    -rw-------   1 root   wheel       25 Apr  4 01:16 pfSense_version
    lrwxr-xr-x   1 root   wheel       19 Mar 29 19:10 dmesg.boot -> /var/log/dmesg.boot
    -rw-r--r--   1 root   wheel        6 Apr  1 09:37 cp_prunedb_cpzone1.pid
    ----------   1 root   wheel        6 Apr  4 00:43 dhcpleases6.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 dpinger_AP0~192.168.2.1~192.168.2.2.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 dpinger_AP1~192.168.2.1~192.168.2.3.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 dpinger_AP2~192.168.2.1~192.168.2.4.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 pinger_HE_TUN_TUNNELV6~2001:470:1f12:5c0::2~2001:41d0:2:927b::15.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 dpinger_WAN_DHCP~192.168.10.11~5.196.43.182.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:11 expire_accounts.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 filterdns-cpzone1-cpah.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:11 filterdns.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 filterlog.pid
    -rw-r--r--   1 root   wheel        6 Apr  1 09:37 nginx-cpzone1-CaptivePortal-SSL.pid
    -rw-r--r--   1 root   wheel        6 Apr  1 09:37 nginx-cpzone1-CaptivePortal.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 nginx-webConfigurator.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 openvpn_server1.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:11 ping_hosts.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:11 radiusd.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 radvd.pid
    -rw-------   1 root   wheel        6 Mar 29 19:11 smartd.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:10 unbound.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:11 update_alias_url_data.pid
    -rw-r--r--   1 root   wheel        6 Mar 29 19:11 updaterrd.sh.pid
    -rw-------   1 root   wheel        5 Mar 29 19:10 cron.pid
    -rw-r--r--   1 root   wheel        5 Mar 29 19:10 dhclient.rl0.pid
    -rw-r--r--   1 root   wheel        5 Mar 29 19:10 ntpd.pid
    -rw-r--r--   1 root   wheel        5 Mar 29 19:10 sshd.pid
    -rw-------   1 root   wheel        5 Mar 29 19:11 syslog.pid
    -rw-------   1 root   wheel        3 Mar 29 19:10 devd.pid
    -rw-r--r--   1 root   wheel        3 Mar 29 19:10 php-fpm.pid
    -rw-r--r--   1 root   wheel        1 Apr  4 01:16 pfSense_version.rc
    -rw-r--r--   1 root   wheel        0 Apr  2 10:47 acme.conf.dirty
    srw-rw-rw-   1 root   wheel        0 Mar 29 19:10 check_reload_status
    srw-rw-rw-   1 root   wheel        0 Mar 29 19:10 devd.pipe
    srw-rw-rw-   1 root   wheel        0 Mar 29 19:10 devd.seqpacket.pipe
    srw-rw-rw-   1 root   wheel        0 Mar 29 19:10 dpinger_AP0~192.168.2.1~192.168.2.2.sock
    srw-rw-rw-   1 root   wheel        0 Mar 29 19:10 dpinger_AP1~192.168.2.1~192.168.2.3.sock
    srw-rw-rw-   1 root   wheel        0 Mar 29 19:10 dpinger_AP2~192.168.2.1~192.168.2.4.sock
    srw-rw-rw-   1 root   wheel        0 Mar 29 19:10 dpinger_HE_TUN_TUNNELV6~2001:470:1f12:5c0::2~2001:41d0:2:927b::15.sock
    srw-rw-rw-   1 root   wheel        0 Mar 29 19:10 dpinger_WAN_DHCP~192.168.10.11~5.196.43.182.sock
    srw-rw-rw-   1 root   wheel        0 Mar 29 19:11 log
    srw-------   1 root   wheel        0 Mar 29 19:11 logpriv
    srw-------   1 root   wheel        0 Mar 29 19:10 php-fpm.socket
    srw-rw----   1 root   wheel        0 Mar 29 19:11 radiusd.sock
    -rw-r--r--   1 root   wheel        0 Mar 29 19:10 utmp
    

    5 % used.



  • Check it out..

    [2.4.4-RELEASE][root@pfSense-X8DTHIF-01.localdomain]/root: ls -al -S /var/run
    total 3420
    -rw-r--r--   1 root  wheel     3375103 Apr  2 04:42 filter_reload_status
    drwxr-xr-x   4 root  wheel        1024 Apr  2 04:46 .
    drwxr-xr-x  26 root  wheel         512 Mar  5 21:39 ..
    drwxrwxr-x   2 root  operator      512 Mar  6 03:27 .snap
    drwx------   3 www   www           512 Oct  3 19:24 lighttpd
    -rw-r--r--   1 root  wheel         394 Apr  2 04:46 utx.active
    -r--r--r--   1 root  wheel         230 Mar  6 03:28 ld-elf.so.hints
    -r--r--r--   1 root  wheel         129 Mar  6 03:28 ld-elf32.so.hints
    -rw-------   1 root  wheel          39 Apr  2 04:46 pfSense_version
    lrwxr-xr-x   1 root  wheel          19 Mar  6 03:27 dmesg.boot -> /var/log/dmesg                                                                                                                     .boot
    -rw-r--r--   1 root  wheel           6 Mar  6 03:28 dpinger_GW_WAN~204.101.25.13                                                                                                                     7~204.101.25.129.pid
    -rw-r--r--   1 root  wheel           6 Mar  6 03:28 expire_accounts.pid
    -rw-r--r--   1 root  wheel           6 Apr  2 04:43 nginx-webConfigurator.pid
    -rw-r--r--   1 root  wheel           6 Mar  6 03:28 ping_hosts.pid
    -rw-r--r--   1 root  wheel           6 Mar  9 03:08 sshd.pid
    -rw-r--r--   1 root  wheel           6 Mar  9 03:06 unbound.pid
    -rw-r--r--   1 root  wheel           6 Mar  6 03:28 update_alias_url_data.pid
    -rw-r--r--   1 root  wheel           6 Apr  2 04:43 updaterrd.sh.pid
    -rw-------   1 root  wheel           5 Mar  6 03:28 cron.pid
    -rw-r--r--   1 root  wheel           5 Mar  6 03:28 filterlog.pid
    -rw-r--r--   1 root  wheel           5 Mar  6 03:28 ntpd.pid
    -rw-r--r--   1 root  wheel           5 Apr  2 04:43 php-fpm.pid
    -rw-------   1 root  wheel           5 Mar  6 03:28 syslog.pid
    -rw-------   1 root  wheel           3 Mar  6 03:27 devd.pid
    -rw-r--r--   1 root  wheel           1 Apr  2 04:46 pfSense_version.rc
    srw-rw-rw-   1 root  wheel           0 Apr  2 04:43 check_reload_status
    srw-rw-rw-   1 root  wheel           0 Mar  6 03:27 devd.pipe
    srw-rw-rw-   1 root  wheel           0 Mar  6 03:27 devd.seqpacket.pipe
    srw-rw-rw-   1 root  wheel           0 Mar  6 03:28 dpinger_GW_WAN~204.101.25.13                                                                                                                     7~204.101.25.129.sock
    srw-rw-rw-   1 root  wheel           0 Mar  6 03:28 log
    srw-------   1 root  wheel           0 Mar  6 03:28 logpriv
    srw-------   1 root  wheel           0 Apr  2 04:43 php-fpm.socket
    -rw-r--r--   1 root  wheel           0 Mar  6 03:27 utmp
    
    


  • 3.3 Mega ?
    It's a human readable text file.
    What in it ???????



  • Re: filter_reload_status filling /var/run directory

    Sorry for the late reply,

    The file has 68313 rows at this moment, so I will just post part of it.



  • Re: filter_reload_status filling /var/run directory

    Sorry for the late reply,

    The file has 68313 rows at this moment, so I will just post part of it.

    These are the first few lines:

    Setting up pass/block rules Default allow LAN to any rule
    Creating rule Default allow LAN to any rule
    Pre-caching Default allow LAN IPv6 to any rule...
    Creating filter rule Default allow LAN IPv6 to any rule ...
    Creating filter rules Default allow LAN IPv6 to any rule ...
    Setting up pass/block rules
    Setting up pass/block rules Default allow LAN IPv6 to any rule
    Creating rule Default allow LAN IPv6 to any rule

    These are the last lines
    Creating rule Default allow LAN to any rule
    Pre-caching Default allow LAN IPv6 to any rule...
    Creating filter rule Default allow LAN IPv6 to any rule ...
    Creating filter rules Default allow LAN IPv6 to any rule ...
    Setting up pass/block rules
    Done.



  • I know this topic is quite old, but did anyone resolve this issue?
    I am running into the same thing.

    [2.4.4-RELEASE][root@att.com]/var/run: ls -l
    total 144
    drwxrwxr-x  2 root    operator    512 Sep 29 03:08 .snap
    srw-rw-rw-  1 root    wheel         0 Sep 29 03:08 check_reload_status
    -rw-------  1 root    wheel         3 Sep 29 03:08 cron.pid
    -rw-------  1 root    wheel         3 Sep 29 03:08 devd.pid
    srw-rw-rw-  1 root    wheel         0 Sep 29 03:08 devd.pipe
    srw-rw-rw-  1 root    wheel         0 Sep 29 03:08 devd.seqpacket.pipe
    lrwxr-xr-x  1 root    wheel        19 Sep 29 03:08 dmesg.boot -> /var/log/dmesg.boot
    -rw-r--r--  1 root    wheel         5 Sep 29 03:09 dpinger_WAN2GWv6~2001:1890:c03:960::11e5:95e2~2001:1890:0c03:0960:0000:0000:eee5:95e2.pid
    srw-rw-rw-  1 root    wheel         0 Sep 29 03:09 dpinger_WAN2GWv6~2001:1890:c03:960::11e5:95e2~2001:1890:0c03:0960:0000:0000:eee5:95e2.sock
    -rw-r--r--  1 root    wheel         5 Sep 29 03:09 dpinger_WAN2GW~206.121.142.210~206.121.142.209.pid
    srw-rw-rw-  1 root    wheel         0 Sep 29 03:09 dpinger_WAN2GW~206.121.142.210~206.121.142.209.sock
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 expire_accounts.pid
    -rw-r--r--  1 root    wheel     25478 Nov  5 14:18 filter_reload_status
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 filterdns.pid
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 filterlog.pid
    -rw-r--r--  1 root    wheel         6 Nov  5 14:20 haproxy.pid
    -r--r--r--  1 root    wheel       230 Sep 29 03:13 ld-elf.so.hints
    -r--r--r--  1 root    wheel       129 Sep 29 03:13 ld-elf32.so.hints
    srw-rw-rw-  1 root    wheel         0 Sep 29 03:09 log
    srw-------  1 root    wheel         0 Sep 29 03:09 logpriv
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 nginx-webConfigurator.pid
    -rw-r--r--  1 root    wheel         5 Sep 29 03:09 ntpd.pid
    -rw-r--r--  1 root    wheel         6 Sep 29 04:19 openvpn_server1.pid
    -rw-r--r--  1 root    wheel         5 Oct 14 11:17 pfSense-upgrade-GUI.pid
    -rw-------  1 root    wheel        25 Nov 11 11:46 pfSense_version
    -rw-r--r--  1 root    wheel         1 Nov 11 11:46 pfSense_version.rc
    -rw-r--r--  1 root    wheel         3 Sep 29 03:08 php-fpm.pid
    srw-------  1 root    wheel         0 Sep 29 03:08 php-fpm.socket
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 ping_hosts.pid
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 radvd.pid
    -rw-r--r--  1 root    wheel         6 Sep 29 03:08 sshd.pid
    drwx--x--x  3 root    wheel       512 Oct 14 11:17 sudo
    -rw-------  1 root    wheel         5 Sep 29 03:09 syslog.pid
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 unbound.pid
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 update_alias_url_data.pid
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 updaterrd.sh.pid
    -rw-r--r--  1 root    wheel         0 Sep 29 03:08 utmp
    -rw-r--r--  1 root    wheel       394 Nov 11 11:47 utx.active
    -rw-r--r--  1 root    wheel         6 Sep 29 03:09 xinetd.pid
    drwxr-xr-x  2 zabbix  zabbix      512 Oct 14 11:17 zabbix-agent
    
    

    I am also having an issue with the /var/run folder getting filled up due to Zabbix.
    I have to uninstall Zabbix from pfSense and the file goes from being really small to about 3 megs in a week.

    [2.4.4-RELEASE][root@att.com]/var/run: cd sudo
    [2.4.4-RELEASE][root@att.com]/var/run/sudo: ls -l
    total 4
    drwx------  2 root  wheel  512 Oct 14 11:17 ts
    [2.4.4-RELEASE][root@att.com]/var/run/sudo: cd ts
    [2.4.4-RELEASE][root@att.com]/var/run/sudo/ts: ls -l
    total 3168
    -rw-------  1 root  wheel  3211264 Nov 11 11:53 zabbix
    [2.4.4-RELEASE][root@att.com]/var/run/sudo/ts:
    
    

    I was not having this issue until I updated pfSense to 2.4.4 release p3 about 2 months ago.

    Thank you for any help you can provide.


Log in to reply