OPNsense Forum

Archive => 24.1, 24.4 Legacy Series => Topic started by: pfa on March 25, 2024, 02:26:51 AM

Title: /var/log/system overflowing with fragmentation messages
Post by: pfa on March 25, 2024, 02:26:51 AM
Hello,

Since the upgrade to 24.1, my /var/log/system started overflowing with messages like this:
<13>1 2024-03-24T18:18:56-04:00 router.pfa.name kernel - - [meta sequenceId="30871983"] pf_normalize_ip: reass frag 28725 @ 1296-1410
<13>1 2024-03-24T18:18:56-04:00 router.pfa.name kernel - - [meta sequenceId="30871984"] pf_fillup_fragment: reass frag 28725 @ 1296-1410
<13>1 2024-03-24T18:18:56-04:00 router.pfa.name kernel - - [meta sequenceId="30871985"] pf_reassemble: complete: 0xfffff80118d44600(1430)


Maximum file size (MB) option seems not to work on this log. Rebooting helps for some time, then it starts again.
Title: Re: /var/log/system overflowing with fragmentation messages
Post by: pfa on March 27, 2024, 01:23:24 AM
Tried changing notice to warning in /usr/local/etc/syslog-ng.conf.d/syslog-ng-local.conf
So far it's working, but doesn't seem like a proper solution.
Title: Re: /var/log/system overflowing with fragmentation messages
Post by: franco on March 27, 2024, 08:08:25 AM
Hmm, the log rotation is once per hour if required. Just how many messages are being generated here?


Cheers,
Franco
Title: Re: /var/log/system overflowing with fragmentation messages
Post by: franco on March 27, 2024, 08:14:00 AM
Firewall: Settings: Advanced:  Debug

If you set it to "Generate debug messages for various errors." this will apparently start spamming. "Generate debug messages for various errors." should avoid these.


Cheers,
Franco
Title: Re: /var/log/system overflowing with fragmentation messages
Post by: pfa on April 01, 2024, 08:18:00 PM
Quote from: franco on March 27, 2024, 08:08:25 AM
Hmm, the log rotation is once per hour if required. Just how many messages are being generated here?

Doesn't seem like rotation works for /var/logs/system/*. No matter what values I set for max file size, it still grows uncontrollably until it fills the entire ramdisk.



Quote from: franco on March 27, 2024, 08:14:00 AM
Firewall: Settings: Advanced:  Debug

If you set it to "Generate debug messages for various errors." this will apparently start spamming. "Generate debug messages for various errors." should avoid these.


Thank you, I'll try this one.
Title: Re: /var/log/system overflowing with fragmentation messages
Post by: franco on April 01, 2024, 08:22:19 PM
Quote from: pfa on April 01, 2024, 08:18:00 PM
Quote from: franco on March 27, 2024, 08:08:25 AM
Hmm, the log rotation is once per hour if required. Just how many messages are being generated here?

Doesn't seem like rotation works for /var/logs/system/*. No matter what values I set for max file size, it still grows uncontrollably until it fills the entire ramdisk.

Well, you're still talking outside of specifics. Uncontrollably within an hour is possible hence my asking for specifics.