First Crash after upgrading to 2.4.5
-
Hello,
I have been having issues ever since I upgraded to 2.4.5 from 2.4.4_3. mainly dropping connectivity between pfSenses and my web server (igb3).
This morning when accessing pfsense gui I got a notification of a crash that was detected. I have no idea how to interpret all the information on the dump file but it looks to me it's netmap related with my inline IPS mode sericata install.
Could it be driver related issues with the new version of pfsense on the intel PRO/1000 ET Quad Port 1Gb Gigabit Ethernet Adapter H092P HM9JY. Never had issues with prior versions of pfSense
I have attached the log file and snap shot of a portion of the system log. If someone could review the file that would be great and much appreciated.
Karl
-
start from checking if everything is configured as required
https://forum.netgate.com/topic/138613/configuring-pfsense-netmap-for-suricata-inline-ips-mode-on-em-igb-interfaces
that error means that the queue is full , for some reason it's unable to manage the traffic and it's starting to drop the packets
the suricata logs also could help to understand what's happening, try to grab the log before rebooting.
-
@kiokoman said in First Crash after upgrading to 2.4.5:
start from checking if everything is configured as required
https://forum.netgate.com/topic/138613/configuring-pfsense-netmap-for-suricata-inline-ips-mode-on-em-igb-interfaces
that error means that the queue is full , for some reason it's unable to manage the traffic and it's starting to drop the packets
the suricata logs also could help to understand what's happening, try to grab the log before rebooting.
Thanks for pointing me in the right direction. I did follow the guideline in the past but for some reason when I went back to review I noticed the two system turnables were missing.
I re-entered back in the two entries and so far no hiccups.
-
What were the two tunables required, for reference?
Edit: Ah I assume it was
dev.igb.X.fcanddev.netmap.buf_size. What buffer size are you using? -
@stephenw10 said in First Crash after upgrading to 2.4.5:
What were the two tunables required, for reference?
e.g dev.igb.3.fc = 0, and dev.netmap.buf_size= 2048
