• One of my PFSense boxes has been up and running for a few years now with no problems. Lately it has been what it seems like is dropping the DHCP leases or timing them out, then not allowing them to connect again. Causing a bunch of computers to no longer have connectivity. I am not sure what to look at for this, but I do have a log on my monitoring server that tells me exactlly when it happened to all of them, so perhaps there is a log I can view for this time frame? I just do not know where to look. Any suggestions?


  • I found in /var/log/dhcpd.log some information, however it does not go back as far as I need.

    This error is happening on all the IP's that can no longer connect? Possible a corrupt hard drive or something?

    Mar 18 08:17:36 pfsense dhcpd: DHCPREQUEST for 192.168.1.104 (192.168.1.1) from de:7e:a3:27:bc:7b via em0: database update failed
    Mar 18 08:17:37 pfsense dhcpd: DHCPDISCOVER from 00:15:17:2c:2b:48 via em0
    Mar 18 08:17:37 pfsense dhcpd: DHCPOFFER on 192.168.1.101 to 00:15:17:2c:2b:48 via em0
    Mar 18 08:17:37 pfsense dhcpd: Wrote 0 deleted host decls to leases file.
    Mar 18 08:17:37 pfsense dhcpd: Wrote 0 new dynamic host decls to leases file.
    Mar 18 08:17:37 pfsense dhcpd: write_lease: unable to write lease 10.1.1.101

    Update:
    Found a post regarding same problem, thought it might be my /var filling up but I am running this firewall on a old HP server computer with a large hard drive, here is some info on that. Not sure what the that are 100% filled are. Could be the problem? Also on the webgui it states that "/ (ufs): 100% of 64G "

    /root: df -i
    Filesystem  1K-blocks    Used Avail Capacity iused  ifree %iused  Mounted on
    /dev/ad0s1a  67565690 62160174  262  100%  47793 8689997    1%  /
    devfs              1        1    0  100%      0      0  100%  /dev
    /dev/md0        3484      140  3068    4%      49    973    5%  /var/run
    devfs              1        1    0  100%      0      0  100%  /var/dhcpd/dev

    Starting to look like something is filled and it needs a Digital Enema?


  • Are you running squid or ntop or ?

    Its either logs or pkg cache that filled the drive

    du -sh
    ```might get you closer to the abuser

  • I am running squid, I use to have NTOP installed and stopped working, it is possible it never cleanly uninstalled.

    Packages installed are

    nut - for UPS monitoring
    Squid3


  • du -sh shows
    " 29G    ."

    Here is a pic of the web gui


  • Your disk's full. 'du -hd1 /' then drill down into subdirectories where the bulk of the space is to find it.


  • /var/squid/logs was holding the bulk at 40% of my hard drive space.
    I removed all the logs. All is fine now.

    Thanks for help.


  • where the other 60% then? pfsense uses less 1GB …


  • DHCP leases can be viewed in pfSense by navigating to Status > DHCP Leases.

    Thanks…