States tab missing data

LostInIgnorance

I am on 2.6.0-DEVELOPMENT (amd64) built on Mon Apr 26 01:03:57 EDT 2021 FreeBSD 12.2-STABLE which is the latest available as I am writing this. I am missing the information on the firewall rules section for the totals on states/bits(bytes). After upgrading to 2.6 for testing due to the dual WAN bug that seems to be plaguing people on the CE edition, I decided to upgrade. Functionally I am not currently noticing issues, but ascetically I am without statistics. Wondering if this is a known bug or if I should throw something in on redmine?

spootle

@lostinignorance I have the same, and my limiters aren't working, unsure if related

bobbenheim

Already mentioned in this thread more than a month ago. They probably already know about it, but they might have bigger fish to fry before they get to this.

vjizzle

Hi. I am running 2.6.0-DEVELOPMENT (amd64) on my test pfSense. I did update it this morning to the latest snapshot (built on Wed Apr 28 01:03:51 EDT 2021), but the States table was working in the previous one for me as well. No problems here with the States table:

(sorry for the large images)

I have tested both the Wed Apr 28 01:03:51 EDT 2021 and Wed Apr 28 08:21:56 EDT 2021 versions and the problem exists on my bare metal installation.

My vm version that I build myself (that is current, with minor changes) does not have this issue, so it appears to be configuration related.

LostInIgnorance

@rschell

Can you define "My vm version that I build myself.." a little bit more? Maybe there is something on a upgrade to packages that happens differently.

I also don't know that it is configuration related as I have two different devices. One running CE and one running the Plus image. Both items are experiencing the issues. The versions for both are listed below that I am currently running.

Netgate SG-1100:
21.05-DEVELOPMENT (arm64)
built on Wed Apr 28 08:21:53 EDT 2021
FreeBSD 12.2-STABLE

Custom Build:
2.6.0-DEVELOPMENT (amd64)
built on Wed Apr 28 08:21:56 EDT 2021
FreeBSD 12.2-STABLE

@lostinignorance My changes from the posted source are:

pfSense - Remove NTPd pool placeholders from the NTP status page (cosmetic)
- Modify the RADVD reload from a "HUP" signal to a shutdown/restart
FreeBSD-src - no significant changes except to create a local build
FreeBSD-ports - Add the filterlog port and fix a filterlog build issue.

The purpose of the process was to fix a 6RD issue and testing FreeBSD version 12 on 2.4 before 2.5 was widely available. I have been just doing it since. Most of the necessary changes have been fixed or incorporated now.

mfld

I encountered this, too after upgrading some instances from 2.5.1 Release to

2.6.0.a.20210513.0100
2.6.0.a.20210514.0100
2.6.0.a.20210515.0100

All are effected

This needs to be on redmine IMO.

@mfld I'm also on 2.6.0.a.20210515.0100 and I'm not having this issue:

So I think more information will be necessary to sort this out, as you can see my rules are quite basic.

mfld

@rschell Interesting. Let's start poking around then and compare notes re: setups.

Where I have seen it, the systems are KVM virtualized, single WAN interface (vtnet0). One OpenVPN interface. No floating rules, no policy routing. NAT-Outbound set to hybrid.

They did at some stage have 2.5.1-DEV with WireGuard which was then removed when they went 2.5.1-Release.

I will try doing a fresh install of 2.6.0-dev from https://snapshots.netgate.com/amd64/pfSense_master/installer/ and restoring the .xml to see if that cleans things up somehow. ~~Where does one obtain install images for dev snapshots ?~~

Patch

@mfld said in States tab missing data:

This needs to be on redmine IMO.

Sound similar to State counters not updating and always show 0/0 since last few updates
But also appears to be more directly in redmine now 2.6.0-DEVELOPMENT - state and byte counters on firewall rules tabs are all 0 zerotext

mfld

Seems fixed in Version 2.6.0.a.20210521.0100 !

Anyone on 2.6.0.a.20210521.0100 or later still seeing this, please get into redmine to let them know. On my end, it's all good now.

mfld

Issue is back with 2.6.0.a.20210604.0100

All zeroes...

jimp

There was a new pf merge unrelated to the old one, so the problem on 2.6.0 snapshots is new and without more debugging we can't say if it has a similar cause or fix to the previous issue. 2.5.2 is OK on the current snapshot, but it's about to get the same pf merge 2.6.0 has so it will likely be affected unless we fix it before the next build.

https://redmine.pfsense.org/issues/11994

wizzkidstef

Not sure what the status of this issue is, but it seems to be an issue fir me, on build 2.6.0.a.20210806.0500

Are there any logs you need me to upload?

jimp

I can't seem to replicate that here on current snapshots on any of my systems, but we did have someone else internally report the same problem yesterday.

Do you have any state data under Diagnostics > States?

If you run pfctl -vvsr do you see counts on rules you expect to be hit?

jimp

Looks like somehow your pfSense PHP module may be out of sync with the kernel and needs reinstalled.

Try this from a shell prompt (console or SSH, not GUI):

pkg upgrade -fy php74-pfSense-module; /etc/rc.php-fpm_restart; /etc/rc.restart_webgui

wizzkidstef

@jimp Thanks. That helped... however when I go to states it now looks like this, and doesn't show anything if you select anything other than 'All' for interfaces

jimp

ok, that's a different problem. I'm seeing that on systems here as well. Likely a similar cause, a mismatch between kernel and the sources for pfctl or similar, but since that's all in base it's unlikely to have an easy temporary workaround until we fix it in the builds.

wizzkidstef

Alright, no worries. Thanks again for your help. Did you need me to submit a bug report on redmine?