Pfsense/snort crash memory related



  • is this related to ram bocx has 4 gig

    Crash report begins.  Anonymous machine information:

    amd64
    10.1-RELEASE
    FreeBSD 10.1-RELEASE #0 29f4af5(releng/10.1)-dirty: Thu Dec  4 08:55:34 CST 2014    root@pfsense-22-amd64-builder:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10

    Crash report details:

    PHP Errors:
    [07-Dec-2014 23:03:11 America/New_York] PHP Fatal error:  Allowed memory size of 268435456 bytes exhausted (tried to allocate 265814016 bytes) in /usr/local/www/widgets/widgets/snort_alerts.widget.php on line 125

    Filename: /var/crash/minfree
    2048



  • The Dashboard process ran out of PHP memory.  The current limit is set for 256 MB.  Not common for this to happen.  Do you have an extremely active network with a high rate of Snort alerts?

    Bill



  • no 2 poor inter net connections 30/5 that doesn't pass 4m and a 5/.7



  • On the Snort dashboard widget, what is this set to:
    "Enter number of recent alerts to display (default is 5)"

    If that is set to a crazy high number, then it could send it nuts.



  • No set to stock thinking 4 or 5



  • I don't have a theory to explain what caused the out-of-memory message.  If this was a single event, it may just have been due to the phase of the moon relative to the spontaneous decay of a Higgs boson …  ;).

    If, on the other hand, it is a repeatable error for you, then some further investigation is called for.  I assume from the info provided in your first post this is a pfSense 2.2-BETA box.  Do you have any other packages running besides Snort?

    Bill


Log in to reply