ntopng causing WAN interface to drop
-
Turned on ntopng the other day and noticed every few hours the WAN interface drops connectivity. Toggling release DHCP and renew brings back the connection for a bit.
Disabling ntopng fixes the issue, so clearly a relationship.
A quick google search isn't bringing up any reports of a similar issue so curious if anyone has some ideas.
Running on x86 with an Intel i340 NIC. RAM Disk for /tmp. Pretty boring otherwise.
-
@digitalgimpus said in ntopng causing WAN interface to drop:
Turned on ntopng the other day and noticed every few hours the WAN interface drops connectivity. Toggling release DHCP and renew brings back the connection for a bit.
Disabling ntopng fixes the issue, so clearly a relationship.
Questions/thoughts:
- What version of pfSense are you running?
- What version of the ntopng package?
- Do you have the WAN interface selected in the ntopng configuration? [You shouldn't]. If you have WAN enabled, you should de-select it.
- Are you running promiscuous mode? If so, you probably should turn that off.
- Did you enable Network Discovery by chance? If so, you should absolutely turn that off. Network Discovery is a Very Bad Thing in general, and if you run it on your WAN interface your ISP may very well choose to blacklist your connection.
-
@dennypage said in ntopng causing WAN interface to drop:
What version of pfSense are you running?
2.7.2
What version of the ntopng package?
ntopng-5.6.d20230920
Do you have the WAN interface selected in the ntopng configuration? [You shouldn't]. If you have WAN enabled, you should de-select it.
This might be the case.
Are you running promiscuous mode? If so, you probably should turn that off.
I don't think so, at least I didn't enable it explicitly.
Did you enable Network Discovery by chance? If so, you should absolutely turn that off. Network Discovery is a Very Bad Thing in general, and if you run it on your WAN interface your ISP may very well choose to blacklist your connection.
Disabled
-
@digitalgimpus said in ntopng causing WAN interface to drop:
ntopng-5.6.d20230920
Okay, that means the old version of the package, 0.8.13. With that version of the ntopng package, promiscuous mode is always on for all selected interfaces. FWIW, with the new version, promiscuous mode is selectable and the default is off.
So, if WAN is selected in the interface list, then ntopng will enable promiscuous mode on the WAN interface. If the ethernet driver has a problem with promiscuous mode, I could see how enabling ntopng could create an issue.
If WAN is de-selected in the interface list, I cannot see a way in which ntopng could cause any issue with the WAN.
-
@dennypage Makes sense. I've disabled WAN and turned things back on. Will see if it happens again or is stable. Thanks for the info.
