<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[CARP sync crashes after 2.2.2 upgrade]]></title><description><![CDATA[<p dir="auto">I have a bunch of different pairs of CARP-enabled pfsense machines performing NAT for various networks, and after upgrading from 2.2.1 to 2.2.2 some of them started having problems with sync. After anything that would cause a filter reload, the primary would show the following error:</p>
<pre><code>Crash report begins.  Anonymous machine information:

amd64
10.1-RELEASE-p9
FreeBSD 10.1-RELEASE-p9 #0 57b23e7(releng/10.1)-dirty: Mon Apr 13 20:30:25 CDT 2015     root@pfs22-amd64-builder:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10

Crash report details:

PHP Errors:
[30-Apr-2015 10:23:57 EST5EDT] XML error: Not well-formed (invalid token) at line 2

</code></pre>
<p dir="auto">All the info I can find about this error relates to package sync problems, but we're not running any packages on any of these machines. It appears the secondary is getting the synced config and passing some invalid reply back to the primary. Both machines stay up, so users aren't affected, but I worry that there's something weird happening here. I haven't seen any of these errors prior to 2.2.2, either. Has anyone else seen this? Any advice would be much appreciated.</p>
]]></description><link>https://forum.netgate.com/topic/83604/carp-sync-crashes-after-2-2-2-upgrade</link><generator>RSS for Node</generator><lastBuildDate>Sat, 07 Mar 2026 09:53:30 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/83604.rss" rel="self" type="application/rss+xml"/><pubDate>Thu, 30 Apr 2015 14:39:11 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to CARP sync crashes after 2.2.2 upgrade on Wed, 06 May 2015 12:34:47 GMT]]></title><description><![CDATA[<p dir="auto">Got it, I didn't see that since it was the same cause but a different symptom. Thanks for the heads-up, I'll update the redmine issue and flag it for closure.</p>
]]></description><link>https://forum.netgate.com/post/542186</link><guid isPermaLink="true">https://forum.netgate.com/post/542186</guid><dc:creator><![CDATA[beatvjiking]]></dc:creator><pubDate>Wed, 06 May 2015 12:34:47 GMT</pubDate></item><item><title><![CDATA[Reply to CARP sync crashes after 2.2.2 upgrade on Wed, 06 May 2015 12:27:31 GMT]]></title><description><![CDATA[<p dir="auto">Already fixed here: https://redmine.pfsense.org/projects/pfsense/repository/revisions/98615a3156d86aed1a560f109087d7e1ad4bf990</p>
<p dir="auto">See https://forum.pfsense.org/index.php?topic=92437.0</p>
]]></description><link>https://forum.netgate.com/post/542185</link><guid isPermaLink="true">https://forum.netgate.com/post/542185</guid><dc:creator><![CDATA[doktornotor]]></dc:creator><pubDate>Wed, 06 May 2015 12:27:31 GMT</pubDate></item><item><title><![CDATA[Reply to CARP sync crashes after 2.2.2 upgrade on Wed, 06 May 2015 12:21:57 GMT]]></title><description><![CDATA[<p dir="auto">Awesome! Just filed a redmine issue pointing to your post for the patch: https://redmine.pfsense.org/issues/4682</p>
<p dir="auto">Can I ask how you got the XML dump? Did you just do a capture or is there a way to get the output elsewhere?</p>
]]></description><link>https://forum.netgate.com/post/542183</link><guid isPermaLink="true">https://forum.netgate.com/post/542183</guid><dc:creator><![CDATA[beatvjiking]]></dc:creator><pubDate>Wed, 06 May 2015 12:21:57 GMT</pubDate></item><item><title><![CDATA[Reply to CARP sync crashes after 2.2.2 upgrade on Wed, 06 May 2015 09:51:14 GMT]]></title><description><![CDATA[<p dir="auto">Hi,</p>
<p dir="auto">I have exactly the same issue since the upgrade in the same configuration as you.</p>
<p dir="auto">Sending to backup :</p>
<pre><code>
[2.2.2-RELEASE][admin@ZNA]/etc: ./rc.filter_synchronize
May  6 11:05:16 ZNA php: rc.filter_synchronize: Beginning XMLRPC sync to https://10.0.0.203:443.
May  6 11:05:17 ZNA php: rc.filter_synchronize: XMLRPC sync successfully completed with https://10.0.0.203:443.

---SENT---
POST /xmlrpc.php HTTP/1.0
User-Agent: PEAR XML_RPC
Host: 10.0.0.203
Authorization: Basic my_hashed_password_was_here
Content-Type: text/xml
Content-Length: 203

 &lt;methodcall&gt;&lt;methodname&gt;pfsense.filter_configure&lt;/methodname&gt;
 &lt;params&gt;&lt;param&gt;
&lt;value&gt;&lt;string&gt;my_password_was_here&lt;/string&gt;&lt;/value&gt;&lt;/params&gt;&lt;/methodcall&gt; 

---END---

</code></pre>
<p dir="auto">Answer I got back:</p>
<pre><code>
---GOT---
HTTP/1.0 200 OK
Expires: Fri, 08 May 2015 11:05:18 GMT
Cache-Control: max-age=180000
Content-type: text/html
Connection: close
Date: Wed, 06 May 2015 09:05:19 GMT
Server: lighttpd/1.4.35

Warning: in_array() expects parameter 2 to be array, null given in /etc/inc/unbound.inc on line 239

Warning: in_array() expects parameter 2 to be array, null given in /etc/inc/unbound.inc on line 239

Warning: in_array() expects parameter 2 to be array, null given in /etc/inc/unbound.inc on line 239

Warning: Cannot modify header information - headers already sent by (output started at /etc/inc/unbound.inc:239) in /etc/inc/xmlrpc_server.inc on line 431

Warning: Cannot modify header information - headers already sent by (output started at /etc/inc/unbound.inc:239) in /etc/inc/xmlrpc_server.inc on line 431

 &lt;methodresponse&gt;&lt;params&gt;&lt;param&gt;
&lt;value&gt;&lt;boolean&gt;1&lt;/boolean&gt;&lt;/value&gt;&lt;/params&gt;&lt;/methodresponse&gt; 
---END---

May  6 11:05:26 ZNA php: rc.filter_synchronize: An error code was received while attempting Filter sync with username admin https://10.0.0.203:443 - Code 2: Invalid return payload: enable debugging to examine incoming payload
May  6 11:05:26 ZNA php: rc.filter_synchronize: New alert found: An error code was received while attempting Filter sync with username admin https://10.0.0.203:443 - Code 2: Invalid return payload: enable debugging to examine incoming payload

</code></pre>
<p dir="auto">/etc/inc/unbound.inc</p>
<pre><code>        if (isset($config['unbound']['forwarding'])) {
                $dnsservers = array();
                if (isset($config['system']['dnsallowoverride'])) {
                        $ns = array_unique(get_nameservers());
                        foreach($ns as $nameserver) {
                                if ($nameserver)
                                        $dnsservers[] = $nameserver;
                        }
                }
                $sys_dnsservers = array_unique(get_dns_servers());
                foreach ($sys_dnsservers as $sys_dnsserver) {
239 --&gt;                   if ($sys_dnsserver &amp;&amp; (!in_array($sys_dnsserver, $ns))) {
                                $dnsservers[] = $sys_dnsserver;
                        }
                }

</code></pre>
<p dir="auto">Seems that <em>$ns</em> is null when you don't have DNS Allow Override (I guess this is when you check the box that states that your DHCP interfaces can override your manually set DNS.</p>
<p dir="auto">We probably miss a <strong>$ns = array();</strong> in line 229 in the slave to prevent him to send PHP warnings that are not XML compliant indeed.</p>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/patch">@<bdi>patch</bdi></a></p>
<pre><code>229a230
&gt;               $ns = array();

</code></pre>
<p dir="auto">I can't log a redmine issue :(</p>
<p dir="auto">Hope that helps.</p>
]]></description><link>https://forum.netgate.com/post/542110</link><guid isPermaLink="true">https://forum.netgate.com/post/542110</guid><dc:creator><![CDATA[[[global:former-user]]]]></dc:creator><pubDate>Wed, 06 May 2015 09:51:14 GMT</pubDate></item><item><title><![CDATA[Reply to CARP sync crashes after 2.2.2 upgrade on Fri, 01 May 2015 15:12:58 GMT]]></title><description><![CDATA[<p dir="auto">I'm willing to do some more digging here, I just need to know where to start. Can anyone tell me where I enable the debugging for this so I can dump the XML and see where the problem lies?</p>
]]></description><link>https://forum.netgate.com/post/541332</link><guid isPermaLink="true">https://forum.netgate.com/post/541332</guid><dc:creator><![CDATA[beatvjiking]]></dc:creator><pubDate>Fri, 01 May 2015 15:12:58 GMT</pubDate></item></channel></rss>