OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: siga75 on May 31, 2020, 04:51:33 PM

Title: out of memory
Post by: siga75 on May 31, 2020, 04:51:33 PM
I just installed Veem for baking up my gaming laptop, which is in WAN in respect of OPNsense, to a NAS in a network with jumbo frame enabled.

The backup is like 300GB and suricata, which is configured to IPS the WAN, keep eating more and more memory.

My system has 16GB RAM and 8GB swap, it freeze for having finished the memory. I can't even login since he can't fork new processes, I had to brutally power it off

In normal operation I have 12GB of free mem.

I don't know if it's a new issue since I never did such big transfers in WAN, or if jumbo frames play something here.
Title: Re: out of memory
Post by: banym on May 31, 2020, 07:22:45 PM
Jumboframes on WAN should not play a role, since to my knowledge, WAN providers will not support them.

If you try to inspect that mass of data this maybe will bring such problems.
You're sure its correlated to the backup job?
Title: Re: out of memory
Post by: siga75 on June 01, 2020, 10:37:00 AM
Thanks for your reply

- jumboframe is not on WAN, only on another network where the NAS is connected
- WAN of OPNsense is not actually a real WAN, I have an OpenWRT router in between, and here is where my laptop is connected (can be wired or wifi). This router is connected to the ISP supplied modem/router
- Yes, I am sure, I tried 3 times and I see, with "top" command, the memory grow exactly when backup start
Title: Re: out of memory
Post by: siga75 on September 06, 2020, 10:59:06 AM
Looks like disabling promiscuous mode solve the issue, probably in that mode all the TCP connection data is kept in memory until the session is closed.

I don't need promiscuous mode in any case, and also backup is faster now