OPNsense Forum

English Forums => 26.1, 26,4 Series => Topic started by: lmoore on March 10, 2026, 03:07:25 PM

Title: [SOLVED] Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: lmoore on March 10, 2026, 03:07:25 PM
I've noticed in the /tmp folder on my firewall a large number of files accumulating and I think they are related to ARP collection.

My system has been up since upgrading to 26.1.3 for 5 days, 16:15. The number of these files is currently 16316 and are being generated on average every 30 seconds.
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on March 10, 2026, 03:16:12 PM
Hi Larry,

> src/opnsense/service/modules/actions/script_output.py:    temp_prefix = 'tmpcfd_'

It's for the background service.  A peek into the files may help with who is requesting them.

The backend log will also show how many times something is requested:

# opnsense-log -f configd


Cheers,
Franco
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: lmoore on March 10, 2026, 03:53:28 PM
Quote from: franco on March 10, 2026, 03:16:12 PMHi Larry,

The backend log will also show how many times something is requested:

# opnsense-log -f configd


Cheers,
Franco

Could be 'request arp table' but not every time.

-rw-------  1 root wheel  4233 Mar 10 22:39:17 2026 /tmp/tmpcfd_8kdanosl
-rw-------  1 root wheel  4233 Mar 10 22:39:48 2026 /tmp/tmpcfd_0sgm5bur
-rw-------  1 root wheel  4232 Mar 10 22:40:19 2026 /tmp/tmpcfd_jj1uzk8m
-rw-------  1 root wheel  4232 Mar 10 22:40:49 2026 /tmp/tmpcfd_wn8rez9i
-rw-------  1 root wheel  4233 Mar 10 22:41:20 2026 /tmp/tmpcfd_6o5ga9xl

<13>1 2026-03-10T22:39:53+08:00 gatekeeper configd.py 576 - [meta sequenceId="320232"] [e5b7bb5b-1113-465a-90d2-00be38fe3568] Get sysctl value(s)
<13>1 2026-03-10T22:39:53+08:00 gatekeeper configd.py 576 - [meta sequenceId="320233"] [baa385eb-9508-4869-a4d2-59396a1cbba3] show WireGuard statistics [dump]
<13>1 2026-03-10T22:39:54+08:00 gatekeeper configd.py 576 - [meta sequenceId="320234"] [81be3cbc-c6ab-44f4-8e17-01525f7b8315] request ifconfig
<13>1 2026-03-10T22:39:54+08:00 gatekeeper configd.py 576 - [meta sequenceId="320235"] [4b7824f1-4e0b-4dba-babf-48c32ced43e2] show system routing table
<13>1 2026-03-10T22:39:54+08:00 gatekeeper configd.py 576 - [meta sequenceId="320236"] [2f3b4927-adb0-4606-8e9d-ce195a91989f] Reading primary IP addresses of
<13>1 2026-03-10T22:39:56+08:00 gatekeeper configd.py 576 - [meta sequenceId="320237"] [761b705a-d76d-4b39-96b1-2b1c83452914] request ifconfig
<13>1 2026-03-10T22:39:56+08:00 gatekeeper configd.py 576 - [meta sequenceId="320238"] [5b49612f-9f8b-4930-a593-5a144e57ecb1] show WireGuard statistics [dump]
<13>1 2026-03-10T22:39:56+08:00 gatekeeper configd.py 576 - [meta sequenceId="320239"] [7f697ada-5ead-4b09-b517-d215e89fd056] show system routing table
<13>1 2026-03-10T22:39:56+08:00 gatekeeper configd.py 576 - [meta sequenceId="320240"] [29693ea1-a251-40f0-83cd-a9604c2e38dc] Reading primary IP addresses of
<13>1 2026-03-10T22:39:57+08:00 gatekeeper configd.py 576 - [meta sequenceId="320241"] [5e35a063-4200-4a39-b49d-fb0f013e91dd] request nut status
<13>1 2026-03-10T22:39:57+08:00 gatekeeper configd.py 576 - [meta sequenceId="320242"] [015c9b10-3081-4387-85a8-f7b95e73f471] Get sysctl value(s)
<13>1 2026-03-10T22:39:57+08:00 gatekeeper configd.py 576 - [meta sequenceId="320243"] [4090e0b1-0d2e-4b0d-9ab0-37d45b911e2b] retrieve ups status
<13>1 2026-03-10T22:39:58+08:00 gatekeeper configd.py 576 - [meta sequenceId="320244"] [f9fec04b-23b2-4d64-803b-61b27ced7d78] request arp table
<13>1 2026-03-10T22:39:59+08:00 gatekeeper configd.py 576 - [meta sequenceId="320245"] [96960158-8ff3-4ed5-bc68-a8d8e5e929b3] request ifconfig
<13>1 2026-03-10T22:39:59+08:00 gatekeeper configd.py 576 - [meta sequenceId="320246"] [86d8370c-5a85-45eb-8a03-f54e24d64373] request arp table
<13>1 2026-03-10T22:39:59+08:00 gatekeeper configd.py 576 - [meta sequenceId="320247"] [794c30fa-10d2-4d11-80eb-985e9b394bfa] list gateway status
<13>1 2026-03-10T22:40:00+08:00 gatekeeper configd.py 576 - [meta sequenceId="320248"] [7daa0120-d1ec-45bc-bb73-3a0e8b8b703d] request ifconfig
<13>1 2026-03-10T22:40:00+08:00 gatekeeper configd.py 576 - [meta sequenceId="320249"] [16b4cbc2-22a9-40e4-85d8-7d9acea9b80a] list gateway status
<13>1 2026-03-10T22:40:00+08:00 gatekeeper configd.py 576 - [meta sequenceId="320250"] [b3a020d1-33f5-4443-a9bc-d84e563c988c] request nut status
<13>1 2026-03-10T22:40:00+08:00 gatekeeper configd.py 576 - [meta sequenceId="320251"] [0bcadd5a-0f3e-427c-9009-076394f695c2] retrieve ups status
<13>1 2026-03-10T22:40:03+08:00 gatekeeper configd.py 576 - [meta sequenceId="320252"] [cab12f25-d725-4c71-96ca-c92aa545a791] Get sysctl value(s)
<13>1 2026-03-10T22:40:03+08:00 gatekeeper configd.py 576 - [meta sequenceId="320253"] [546c2c52-e78b-4feb-a536-e345ab807c66] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:04+08:00 gatekeeper configd.py 576 - [meta sequenceId="320254"] [5ebb63f8-835a-4b66-bf50-b287b59dad83] request ifconfig
<13>1 2026-03-10T22:40:04+08:00 gatekeeper configd.py 576 - [meta sequenceId="320255"] [331b29ed-1623-4649-815a-970f7bd81992] show system routing table
<13>1 2026-03-10T22:40:04+08:00 gatekeeper configd.py 576 - [meta sequenceId="320256"] [81a8b51c-315a-4e51-b030-0176ab679bd2] Reading primary IP addresses of
<13>1 2026-03-10T22:40:06+08:00 gatekeeper configd.py 576 - [meta sequenceId="320257"] [b09626ae-9118-4945-b006-7bc738360649] request ifconfig
<13>1 2026-03-10T22:40:06+08:00 gatekeeper configd.py 576 - [meta sequenceId="320258"] [a6749288-67d2-495a-a361-adc616dac351] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:06+08:00 gatekeeper configd.py 576 - [meta sequenceId="320259"] [7d4671c5-8bcb-486b-af57-b289a7a29b38] show system routing table
<13>1 2026-03-10T22:40:06+08:00 gatekeeper configd.py 576 - [meta sequenceId="320260"] [be14c046-fca4-4afb-8b25-3f64a0306707] Reading primary IP addresses of
<13>1 2026-03-10T22:40:08+08:00 gatekeeper configd.py 576 - [meta sequenceId="320261"] [10ad5333-0e17-4b0e-9182-a14696ebbd0e] request nut status
<13>1 2026-03-10T22:40:08+08:00 gatekeeper configd.py 576 - [meta sequenceId="320262"] [8bb77b70-5f7a-4d32-88e2-d65d06ee9904] Get sysctl value(s)
<13>1 2026-03-10T22:40:08+08:00 gatekeeper configd.py 576 - [meta sequenceId="320263"] [389b327d-06c9-4bfd-b671-b0af7735d3fe] retrieve ups status
<13>1 2026-03-10T22:40:09+08:00 gatekeeper configd.py 576 - [meta sequenceId="320264"] [50f2d415-b3ff-495c-a9b7-922c8d28f51f] request arp table
<13>1 2026-03-10T22:40:09+08:00 gatekeeper configd.py 576 - [meta sequenceId="320265"] [15cb4849-9c47-4c18-849d-d8677a15028a] request ifconfig
<13>1 2026-03-10T22:40:09+08:00 gatekeeper configd.py 576 - [meta sequenceId="320266"] [885c7086-a09f-4929-b905-db7c15d038ad] request arp table
<13>1 2026-03-10T22:40:09+08:00 gatekeeper configd.py 576 - [meta sequenceId="320267"] [c34517a3-6af2-4a86-b130-ad16281cc14a] list gateway status
<13>1 2026-03-10T22:40:10+08:00 gatekeeper configd.py 576 - [meta sequenceId="320268"] [2a03bfeb-b80f-4811-be17-217bb5bbe812] request nut status
<13>1 2026-03-10T22:40:10+08:00 gatekeeper configd.py 576 - [meta sequenceId="320269"] [1cc78cd2-7ef4-4b9f-8134-7f6901b03496] retrieve ups status
<13>1 2026-03-10T22:40:11+08:00 gatekeeper configd.py 576 - [meta sequenceId="320270"] [50fc40d6-fbda-470b-8bbb-6b6e20dbfb25] request ifconfig
<13>1 2026-03-10T22:40:11+08:00 gatekeeper configd.py 576 - [meta sequenceId="320271"] [9ab454f3-907a-4562-bebf-62fce9ca0807] list gateway status
<13>1 2026-03-10T22:40:13+08:00 gatekeeper configd.py 576 - [meta sequenceId="320272"] [9e3c5287-e942-4db8-b5e4-7aa53d18fae3] Get sysctl value(s)
<13>1 2026-03-10T22:40:13+08:00 gatekeeper configd.py 576 - [meta sequenceId="320273"] [2ada19fe-2ea4-46dc-8d2f-b67a7b612e18] Get sysctl value(s)
<13>1 2026-03-10T22:40:13+08:00 gatekeeper configd.py 576 - [meta sequenceId="320274"] [1bfce9c5-bdcc-477e-b3c0-c575d40b6c13] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:14+08:00 gatekeeper configd.py 576 - [meta sequenceId="320275"] [3fe92c37-7d99-46f3-92c9-d5a291264c23] request ifconfig
<13>1 2026-03-10T22:40:14+08:00 gatekeeper configd.py 576 - [meta sequenceId="320276"] [20a9b2f9-c10b-4e60-95f9-cf0d3a1b43ff] show system routing table
<13>1 2026-03-10T22:40:15+08:00 gatekeeper configd.py 576 - [meta sequenceId="320277"] [0fa45d0b-c937-4ee3-a86b-52988dd3b064] Reading primary IP addresses of
<13>1 2026-03-10T22:40:16+08:00 gatekeeper configd.py 576 - [meta sequenceId="320278"] [f1fb43db-2dad-4068-9d76-814dbc75d12a] request ifconfig
<13>1 2026-03-10T22:40:16+08:00 gatekeeper configd.py 576 - [meta sequenceId="320279"] [8da1a044-ca1c-4d15-999f-84830e8e609a] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:16+08:00 gatekeeper configd.py 576 - [meta sequenceId="320280"] [8507d79b-3e13-4175-9742-69fe9b501baf] show system routing table
<13>1 2026-03-10T22:40:16+08:00 gatekeeper configd.py 576 - [meta sequenceId="320281"] [93328cc8-962b-4ce0-9d53-87524d61ebcf] Reading primary IP addresses of
<13>1 2026-03-10T22:40:18+08:00 gatekeeper configd.py 576 - [meta sequenceId="320282"] [0ce93f46-214a-40cb-b8aa-bb1da18bd921] request nut status
<13>1 2026-03-10T22:40:18+08:00 gatekeeper configd.py 576 - [meta sequenceId="320283"] [8b29ae2e-84d3-40ea-b432-3c6730e0e577] Get sysctl value(s)
<13>1 2026-03-10T22:40:18+08:00 gatekeeper configd.py 576 - [meta sequenceId="320284"] [b6bde1a0-f5c5-431b-9a7a-31389751c206] retrieve ups status
<13>1 2026-03-10T22:40:19+08:00 gatekeeper configd.py 576 - [meta sequenceId="320285"] [624b6430-01bc-4df0-861c-cfc265b60450] request arp table
<13>1 2026-03-10T22:40:19+08:00 gatekeeper configd.py 576 - [meta sequenceId="320286"] [7db1c799-e374-4ec9-889d-a02b1f131b4c] request ifconfig
<13>1 2026-03-10T22:40:19+08:00 gatekeeper configd.py 576 - [meta sequenceId="320287"] [a571d9a5-afb4-41f7-8c4a-aad67a7c128b] request arp table
<13>1 2026-03-10T22:40:19+08:00 gatekeeper configd.py 576 - [meta sequenceId="320288"] [9d5e568e-3247-43a8-bc30-9c98c601f0ba] list gateway status
<13>1 2026-03-10T22:40:20+08:00 gatekeeper configd.py 576 - [meta sequenceId="320289"] [fe6040b4-b2c0-442f-9dc2-184fbf79da9a] request nut status
<13>1 2026-03-10T22:40:20+08:00 gatekeeper configd.py 576 - [meta sequenceId="320290"] [a6bd7b19-c825-4d4e-8484-4814e38b30d7] retrieve ups status
<13>1 2026-03-10T22:40:21+08:00 gatekeeper configd.py 576 - [meta sequenceId="320291"] [066b6a12-b8c9-43f6-8c5a-e24e125cd111] request ifconfig
<13>1 2026-03-10T22:40:21+08:00 gatekeeper configd.py 576 - [meta sequenceId="320292"] [16e97963-09cd-4844-834f-64ea537781b8] list gateway status
<13>1 2026-03-10T22:40:23+08:00 gatekeeper configd.py 576 - [meta sequenceId="320293"] [3de14fc4-879d-4484-9556-57c062aa70db] Get sysctl value(s)
<13>1 2026-03-10T22:40:23+08:00 gatekeeper configd.py 576 - [meta sequenceId="320294"] [bb2714d7-f118-4559-b86a-01c4bfe78b75] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:24+08:00 gatekeeper configd.py 576 - [meta sequenceId="320295"] [6ec3e384-c440-4f60-8379-9ec5bfc09ac3] request ifconfig
<13>1 2026-03-10T22:40:25+08:00 gatekeeper configd.py 576 - [meta sequenceId="320296"] [80b2cb44-f0a7-46d0-ac24-9d3418a383a8] show system routing table
<13>1 2026-03-10T22:40:25+08:00 gatekeeper configd.py 576 - [meta sequenceId="320297"] [57614362-96ef-4b46-a0dc-532e4bfa5570] Reading primary IP addresses of
<13>1 2026-03-10T22:40:26+08:00 gatekeeper configd.py 576 - [meta sequenceId="320298"] [c2dd9a77-1400-40f1-b438-8398c4bbcd5a] request ifconfig
<13>1 2026-03-10T22:40:26+08:00 gatekeeper configd.py 576 - [meta sequenceId="320299"] [14d15699-cdaf-40ee-9146-f80094e20c1b] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:26+08:00 gatekeeper configd.py 576 - [meta sequenceId="320300"] [e3af1fdd-fe0d-429a-a0fe-6f056e9dbd09] show system routing table
<13>1 2026-03-10T22:40:26+08:00 gatekeeper configd.py 576 - [meta sequenceId="320301"] [3b165464-d7b8-4458-adcc-a8eb1d787c55] Reading primary IP addresses of
<13>1 2026-03-10T22:40:28+08:00 gatekeeper configd.py 576 - [meta sequenceId="320302"] [dcd2ffb1-e136-43bf-bcc2-6193ad259d8a] request nut status
<13>1 2026-03-10T22:40:28+08:00 gatekeeper configd.py 576 - [meta sequenceId="320303"] [be6f75e9-eaa5-4792-a2be-70406141ad9b] Get sysctl value(s)
<13>1 2026-03-10T22:40:28+08:00 gatekeeper configd.py 576 - [meta sequenceId="320304"] [5c1b017d-4f19-45d1-8289-796bbd654fe5] retrieve ups status
<13>1 2026-03-10T22:40:29+08:00 gatekeeper configd.py 576 - [meta sequenceId="320305"] [ca35aba2-ec4f-4f0c-a40d-8bbc955dd870] request arp table
<13>1 2026-03-10T22:40:29+08:00 gatekeeper configd.py 576 - [meta sequenceId="320306"] [70698ecd-1012-4a65-9dab-c7adfa16a6b4] request ifconfig
<13>1 2026-03-10T22:40:29+08:00 gatekeeper configd.py 576 - [meta sequenceId="320307"] [71a1d970-7095-4aa9-a5c7-f6520407c951] request arp table
<13>1 2026-03-10T22:40:30+08:00 gatekeeper configd.py 576 - [meta sequenceId="320308"] [eebeb71e-b00d-48b3-93e2-3fb0d9718dff] list gateway status
<13>1 2026-03-10T22:40:30+08:00 gatekeeper configd.py 576 - [meta sequenceId="320309"] [f461b7f3-647b-4a46-965d-a2254f41cba2] request nut status
<13>1 2026-03-10T22:40:31+08:00 gatekeeper configd.py 576 - [meta sequenceId="320310"] [00e92cca-5838-4ea2-a337-4cd514ebb824] retrieve ups status
<13>1 2026-03-10T22:40:31+08:00 gatekeeper configd.py 576 - [meta sequenceId="320311"] [78950339-3edd-4262-8704-b25d1b1d0cb9] request ifconfig
<13>1 2026-03-10T22:40:31+08:00 gatekeeper configd.py 576 - [meta sequenceId="320312"] [225f2420-1f7c-4e94-be78-1469737bce75] list gateway status
<13>1 2026-03-10T22:40:34+08:00 gatekeeper configd.py 576 - [meta sequenceId="320313"] [83bf7386-3c43-4e38-9127-c706d2c6edcb] Get sysctl value(s)
<13>1 2026-03-10T22:40:34+08:00 gatekeeper configd.py 576 - [meta sequenceId="320314"] [36c216ee-ab1f-46f5-847b-73740b19a886] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:35+08:00 gatekeeper configd.py 576 - [meta sequenceId="320315"] [4e8e9697-54bd-4b98-b48b-0c1dbfc3406c] request ifconfig
<13>1 2026-03-10T22:40:35+08:00 gatekeeper configd.py 576 - [meta sequenceId="320316"] [8b21cfae-dba9-41db-8794-da69ad78f468] show system routing table
<13>1 2026-03-10T22:40:35+08:00 gatekeeper configd.py 576 - [meta sequenceId="320317"] [75380787-a3d7-477c-8406-331f75dbbfb7] Reading primary IP addresses of
<13>1 2026-03-10T22:40:36+08:00 gatekeeper configd.py 576 - [meta sequenceId="320318"] [2023c982-a870-469c-89ea-898ccd76c9fd] request ifconfig
<13>1 2026-03-10T22:40:36+08:00 gatekeeper configd.py 576 - [meta sequenceId="320319"] [bf78cacb-d90a-4121-b235-873ad4e7337b] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:36+08:00 gatekeeper configd.py 576 - [meta sequenceId="320320"] [c488162c-c864-428d-80a6-72d540fb245e] show system routing table
<13>1 2026-03-10T22:40:36+08:00 gatekeeper configd.py 576 - [meta sequenceId="320321"] [4d77e7fc-c360-4550-94ca-9b3bd5d0ee2c] Reading primary IP addresses of
<13>1 2026-03-10T22:40:38+08:00 gatekeeper configd.py 576 - [meta sequenceId="320322"] [07c0022b-c643-41ca-91e7-18431d5cf196] Get sysctl value(s)
<13>1 2026-03-10T22:40:38+08:00 gatekeeper configd.py 576 - [meta sequenceId="320323"] [cce751fc-b3fc-4f3a-8487-707115a52793] request nut status
<13>1 2026-03-10T22:40:38+08:00 gatekeeper configd.py 576 - [meta sequenceId="320324"] [3a081f75-1df4-47cd-ad49-f6802a5c3226] retrieve ups status
<13>1 2026-03-10T22:40:39+08:00 gatekeeper configd.py 576 - [meta sequenceId="320325"] [77597f68-01e6-4f39-be95-cf481730af2f] Get sysctl value(s)
<13>1 2026-03-10T22:40:39+08:00 gatekeeper configd.py 576 - [meta sequenceId="320326"] [21a3c99f-4955-408b-ae3c-5cd5fd4dced7] request arp table
<13>1 2026-03-10T22:40:40+08:00 gatekeeper configd.py 576 - [meta sequenceId="320327"] [1fccc4d8-0e88-4e47-bffd-3f185641d5c2] request ifconfig
<13>1 2026-03-10T22:40:40+08:00 gatekeeper configd.py 576 - [meta sequenceId="320328"] [5524dc41-45ad-4d69-a09c-6a63347250f1] request arp table
<13>1 2026-03-10T22:40:40+08:00 gatekeeper configd.py 576 - [meta sequenceId="320329"] [a4e14728-2022-49e2-aff9-3d926c972d89] list gateway status
<13>1 2026-03-10T22:40:41+08:00 gatekeeper configd.py 576 - [meta sequenceId="320330"] [7fe1e59a-4e60-4b74-bee7-e78e628a8463] request nut status
<13>1 2026-03-10T22:40:41+08:00 gatekeeper configd.py 576 - [meta sequenceId="320331"] [3803deb0-c9a3-4258-be68-6693b4d344e7] retrieve ups status
<13>1 2026-03-10T22:40:41+08:00 gatekeeper configd.py 576 - [meta sequenceId="320332"] [3a1e79ec-a7aa-4c7d-90c5-14de51c7c237] request ifconfig
<13>1 2026-03-10T22:40:41+08:00 gatekeeper configd.py 576 - [meta sequenceId="320333"] [6355fe34-752b-4b04-b442-1567486b8019] list gateway status
<13>1 2026-03-10T22:40:44+08:00 gatekeeper configd.py 576 - [meta sequenceId="320334"] [66a42d19-adb8-4c69-8ac4-460821890747] Get sysctl value(s)
<13>1 2026-03-10T22:40:44+08:00 gatekeeper configd.py 576 - [meta sequenceId="320335"] [b6af836b-ebe1-4157-9374-8ec2ebdbae70] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:46+08:00 gatekeeper configd.py 576 - [meta sequenceId="320336"] [e6ea3f6b-164e-4399-9385-b4ed76ed1e4d] request ifconfig
<13>1 2026-03-10T22:40:46+08:00 gatekeeper configd.py 576 - [meta sequenceId="320337"] [b405a1cd-47fa-467b-a2ce-110fe398dbc6] show system routing table
<13>1 2026-03-10T22:40:46+08:00 gatekeeper configd.py 576 - [meta sequenceId="320338"] [dd52b8b5-ef15-4685-9c8f-34cb218fa1fe] Reading primary IP addresses of
<13>1 2026-03-10T22:40:46+08:00 gatekeeper configd.py 576 - [meta sequenceId="320339"] [016a3cb8-ecc0-47da-9745-636556be5e58] request ifconfig
<13>1 2026-03-10T22:40:46+08:00 gatekeeper configd.py 576 - [meta sequenceId="320340"] [7bff458f-f4bb-435c-8571-1c4a3b770bde] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:46+08:00 gatekeeper configd.py 576 - [meta sequenceId="320341"] [4e9515a5-0317-4941-bfaf-2b03e9d1aefb] show system routing table
<13>1 2026-03-10T22:40:46+08:00 gatekeeper configd.py 576 - [meta sequenceId="320342"] [5a0f26fc-9ed1-4e91-9600-a2d539c9f7bb] Reading primary IP addresses of
<13>1 2026-03-10T22:40:48+08:00 gatekeeper configd.py 576 - [meta sequenceId="320343"] [3d5ecb4a-db53-4515-9bfc-36f0e5fa6e20] request nut status
<13>1 2026-03-10T22:40:48+08:00 gatekeeper configd.py 576 - [meta sequenceId="320344"] [9e3f1fa7-c31a-4ef4-8a56-3cf8da5ac8c4] Get sysctl value(s)
<13>1 2026-03-10T22:40:48+08:00 gatekeeper configd.py 576 - [meta sequenceId="320345"] [3b922214-9003-47ed-9f3b-61f85ee355bb] retrieve ups status
<13>1 2026-03-10T22:40:49+08:00 gatekeeper configd.py 576 - [meta sequenceId="320346"] [2b363b3c-f480-41aa-86aa-599214222de4] request arp table
<13>1 2026-03-10T22:40:50+08:00 gatekeeper configd.py 576 - [meta sequenceId="320347"] [fd7ff911-756e-4ec7-84c3-18400289aa14] request ifconfig
<13>1 2026-03-10T22:40:50+08:00 gatekeeper configd.py 576 - [meta sequenceId="320348"] [149c5ed0-e368-46ca-a590-ee3b1991e6bf] request arp table
<13>1 2026-03-10T22:40:50+08:00 gatekeeper configd.py 576 - [meta sequenceId="320349"] [a7956170-ea2c-4b35-acf7-5a96ec582498] list gateway status
<13>1 2026-03-10T22:40:51+08:00 gatekeeper configd.py 576 - [meta sequenceId="320350"] [6f426e08-072c-4364-80d7-ca79b23ca0e1] request nut status
<13>1 2026-03-10T22:40:51+08:00 gatekeeper configd.py 576 - [meta sequenceId="320351"] [826e7bd3-2300-4185-8726-aa058f5c9e32] retrieve ups status
<13>1 2026-03-10T22:40:52+08:00 gatekeeper configd.py 576 - [meta sequenceId="320352"] [b76b7341-ce0d-4e01-9879-d76d3a6194dd] request ifconfig
<13>1 2026-03-10T22:40:52+08:00 gatekeeper configd.py 576 - [meta sequenceId="320353"] [fdac2308-e095-4fcf-9c9a-b01ca6c6901a] list gateway status
<13>1 2026-03-10T22:40:54+08:00 gatekeeper configd.py 576 - [meta sequenceId="320354"] [da5c822a-5582-4dc5-be4e-7cc3e66ecca3] Get sysctl value(s)
<13>1 2026-03-10T22:40:54+08:00 gatekeeper configd.py 576 - [meta sequenceId="320355"] [ddaeb078-41d2-4e4b-af3a-df51ac40e0de] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:56+08:00 gatekeeper configd.py 576 - [meta sequenceId="320356"] [b6b77c50-4486-40a3-860e-4a46699ee754] request ifconfig
<13>1 2026-03-10T22:40:56+08:00 gatekeeper configd.py 576 - [meta sequenceId="320357"] [4e17c6f3-f8e1-4f03-93f5-5e1cf81b7c97] show system routing table
<13>1 2026-03-10T22:40:56+08:00 gatekeeper configd.py 576 - [meta sequenceId="320358"] [d9a077ec-0326-4807-908f-775a8449ab99] Reading primary IP addresses of
<13>1 2026-03-10T22:40:57+08:00 gatekeeper configd.py 576 - [meta sequenceId="320359"] [759bad0b-3d9c-4804-aaa1-fc5463ebbd48] request ifconfig
<13>1 2026-03-10T22:40:57+08:00 gatekeeper configd.py 576 - [meta sequenceId="320360"] [a5fa679e-5e34-44a4-9749-3470509fcfa3] show WireGuard statistics [dump]
<13>1 2026-03-10T22:40:57+08:00 gatekeeper configd.py 576 - [meta sequenceId="320361"] [178aae76-33ed-4063-a361-7d87c605ca79] show system routing table
<13>1 2026-03-10T22:40:57+08:00 gatekeeper configd.py 576 - [meta sequenceId="320362"] [fd900541-1ac5-492a-af69-ccf1cf644cd4] Reading primary IP addresses of
<13>1 2026-03-10T22:40:59+08:00 gatekeeper configd.py 576 - [meta sequenceId="320363"] [29bf9ee8-1fbf-434e-8a54-7c1b04922bcf] Get sysctl value(s)
<13>1 2026-03-10T22:40:59+08:00 gatekeeper configd.py 576 - [meta sequenceId="320364"] [232870a4-e827-420a-9227-21a5b2c582c1] request nut status
<13>1 2026-03-10T22:40:59+08:00 gatekeeper configd.py 576 - [meta sequenceId="320365"] [eedaabed-0f98-43e9-ae03-8d10d5dfe587] retrieve ups status
<13>1 2026-03-10T22:41:00+08:00 gatekeeper configd.py 576 - [meta sequenceId="320366"] [4951e3e4-134d-4147-933f-eb3bd27f57ec] request arp table
<13>1 2026-03-10T22:41:00+08:00 gatekeeper configd.py 576 - [meta sequenceId="320367"] [9165bccb-f63a-4e03-9cae-a89c411a6779] request ifconfig
<13>1 2026-03-10T22:41:00+08:00 gatekeeper configd.py 576 - [meta sequenceId="320368"] [06e4c57b-3da8-4b3c-b31d-e796fb87bfde] request arp table
<13>1 2026-03-10T22:41:00+08:00 gatekeeper configd.py 576 - [meta sequenceId="320369"] [30e808f3-e528-49d7-a501-377ec28ca50b] list gateway status
<13>1 2026-03-10T22:41:01+08:00 gatekeeper configd.py 576 - [meta sequenceId="320370"] [39a91c72-0933-4bc5-82dc-7306493b8bfb] request nut status
<13>1 2026-03-10T22:41:01+08:00 gatekeeper configd.py 576 - [meta sequenceId="320371"] [52e7ff30-c9ad-4807-ab3c-a7e7429a8b6d] retrieve ups status
<13>1 2026-03-10T22:41:02+08:00 gatekeeper configd.py 576 - [meta sequenceId="320372"] [b949e5c7-9597-4832-b12a-830201d80dd6] request ifconfig
<13>1 2026-03-10T22:41:02+08:00 gatekeeper configd.py 576 - [meta sequenceId="320373"] [a623b182-13a0-40f7-9475-7801e685994c] list gateway status
<13>1 2026-03-10T22:41:04+08:00 gatekeeper configd.py 576 - [meta sequenceId="320374"] [df759146-c178-4b00-ae92-feb727547dfb] Get sysctl value(s)
<13>1 2026-03-10T22:41:04+08:00 gatekeeper configd.py 576 - [meta sequenceId="320375"] [b08c3317-d974-439c-b459-a338e2153f6d] show WireGuard statistics [dump]
<13>1 2026-03-10T22:41:06+08:00 gatekeeper configd.py 576 - [meta sequenceId="320376"] [d095be4a-1577-47f1-97e3-66d5e73bff95] request ifconfig
<13>1 2026-03-10T22:41:06+08:00 gatekeeper configd.py 576 - [meta sequenceId="320377"] [5592db4c-77b3-471e-a728-c38a06e50c8f] show system routing table
<13>1 2026-03-10T22:41:06+08:00 gatekeeper configd.py 576 - [meta sequenceId="320378"] [6f418ce2-8a0a-44ff-901e-fa24e310ec7d] Reading primary IP addresses of
<13>1 2026-03-10T22:41:07+08:00 gatekeeper configd.py 576 - [meta sequenceId="320379"] [992f18a8-fee8-4231-bd28-779642d5227f] request ifconfig
<13>1 2026-03-10T22:41:07+08:00 gatekeeper configd.py 576 - [meta sequenceId="320380"] [4064d4f5-acd1-40e7-aba6-42496523e799] show WireGuard statistics [dump]
<13>1 2026-03-10T22:41:07+08:00 gatekeeper configd.py 576 - [meta sequenceId="320381"] [a6728516-1894-4c04-ae94-0ec21d426793] show system routing table
<13>1 2026-03-10T22:41:07+08:00 gatekeeper configd.py 576 - [meta sequenceId="320382"] [438afa26-46f1-49c1-8ad5-93637e7159a1] Reading primary IP addresses of
<13>1 2026-03-10T22:41:09+08:00 gatekeeper configd.py 576 - [meta sequenceId="320383"] [971be970-8329-49b5-8e39-1301cbbea906] request nut status
<13>1 2026-03-10T22:41:09+08:00 gatekeeper configd.py 576 - [meta sequenceId="320384"] [5d572047-d3ea-4640-a047-91097522bd17] Get sysctl value(s)
<13>1 2026-03-10T22:41:09+08:00 gatekeeper configd.py 576 - [meta sequenceId="320385"] [21e6936b-9c3d-4c5b-acf1-d24cf4be19ce] retrieve ups status
<13>1 2026-03-10T22:41:10+08:00 gatekeeper configd.py 576 - [meta sequenceId="320386"] [f7153811-7a25-4a60-9cd0-fc89143247f8] request arp table
<13>1 2026-03-10T22:41:10+08:00 gatekeeper configd.py 576 - [meta sequenceId="320387"] [7712f7e4-72be-47d4-944a-c02347674a54] request ifconfig
<13>1 2026-03-10T22:41:10+08:00 gatekeeper configd.py 576 - [meta sequenceId="320388"] [a3be8698-39e8-44fe-8cf9-499e611a1ce5] request arp table
<13>1 2026-03-10T22:41:10+08:00 gatekeeper configd.py 576 - [meta sequenceId="320389"] [f5f2148f-2081-471e-ac23-9d82aaab0070] list gateway status
<13>1 2026-03-10T22:41:11+08:00 gatekeeper configd.py 576 - [meta sequenceId="320390"] [f322ca2b-e361-44b1-ab84-bb5d92fe1e9a] request nut status
<13>1 2026-03-10T22:41:11+08:00 gatekeeper configd.py 576 - [meta sequenceId="320391"] [e87f4d96-ba1a-47c5-a896-74cf9203c2f2] retrieve ups status
<13>1 2026-03-10T22:41:12+08:00 gatekeeper configd.py 576 - [meta sequenceId="320392"] [46fc6db0-6d83-44eb-b7f1-1869132aa88e] request ifconfig
<13>1 2026-03-10T22:41:12+08:00 gatekeeper configd.py 576 - [meta sequenceId="320393"] [6037dd5a-9fb4-4d4f-838a-0aac96dd8b38] list gateway status
<13>1 2026-03-10T22:41:14+08:00 gatekeeper configd.py 576 - [meta sequenceId="320394"] [c1824232-0e44-4e9b-a626-ff7ff0550e43] Get sysctl value(s)
<13>1 2026-03-10T22:41:14+08:00 gatekeeper configd.py 576 - [meta sequenceId="320395"] [0a32a220-9235-4101-8158-a9c9260cb0f4] Get sysctl value(s)
<13>1 2026-03-10T22:41:14+08:00 gatekeeper configd.py 576 - [meta sequenceId="320396"] [6ce56edd-60ce-41ce-bb6c-73cf7150b37a] show WireGuard statistics [dump]
<13>1 2026-03-10T22:41:16+08:00 gatekeeper configd.py 576 - [meta sequenceId="320397"] [79e01321-ec9f-4d31-afa8-5ce1ccf9eecb] request ifconfig
<13>1 2026-03-10T22:41:16+08:00 gatekeeper configd.py 576 - [meta sequenceId="320398"] [4787584a-5d03-4040-a1a0-f03a85ea5190] show system routing table
<13>1 2026-03-10T22:41:16+08:00 gatekeeper configd.py 576 - [meta sequenceId="320399"] [ceec06d9-3af4-449b-936a-0e5743adba59] Reading primary IP addresses of
<13>1 2026-03-10T22:41:17+08:00 gatekeeper configd.py 576 - [meta sequenceId="320400"] [385d2cfd-6747-484f-a508-cc350ff74fa9] request ifconfig
<13>1 2026-03-10T22:41:17+08:00 gatekeeper configd.py 576 - [meta sequenceId="320401"] [8191900c-2c31-46f3-8697-97528ac10fd8] show WireGuard statistics [dump]
<13>1 2026-03-10T22:41:17+08:00 gatekeeper configd.py 576 - [meta sequenceId="320402"] [63a2faa5-0a27-4a51-af24-73e6fcf2064d] show system routing table
<13>1 2026-03-10T22:41:17+08:00 gatekeeper configd.py 576 - [meta sequenceId="320403"] [273204c2-5680-4a17-a7f2-5bf4b6a598a2] Reading primary IP addresses of
<13>1 2026-03-10T22:41:19+08:00 gatekeeper configd.py 576 - [meta sequenceId="320404"] [4babc020-381a-451c-b6f3-5685a93142f3] request nut status
<13>1 2026-03-10T22:41:19+08:00 gatekeeper configd.py 576 - [meta sequenceId="320405"] [bd7e5af7-51c5-4465-beb9-5565b1c48916] Get sysctl value(s)
<13>1 2026-03-10T22:41:19+08:00 gatekeeper configd.py 576 - [meta sequenceId="320406"] [14784bc6-8816-4de4-a9d5-301aeb550e5a] retrieve ups status
<13>1 2026-03-10T22:41:20+08:00 gatekeeper configd.py 576 - [meta sequenceId="320407"] [11e8610e-69f0-4b2a-abbc-c1664e03dbf7] request arp table
<13>1 2026-03-10T22:41:21+08:00 gatekeeper configd.py 576 - [meta sequenceId="320408"] [58be29d7-dfd1-4965-b46e-89716560a7c9] request nut status
<13>1 2026-03-10T22:41:21+08:00 gatekeeper configd.py 576 - [meta sequenceId="320409"] [31bdc32b-fd24-4663-834c-1c8e9e0c2870] request ifconfig
<13>1 2026-03-10T22:41:21+08:00 gatekeeper configd.py 576 - [meta sequenceId="320410"] [fba80f81-51e5-4b05-9a39-9e930aba61d3] request arp table
<13>1 2026-03-10T22:41:21+08:00 gatekeeper configd.py 576 - [meta sequenceId="320411"] [70727266-eeb9-4074-be59-06dd51de6e72] list gateway status
<13>1 2026-03-10T22:41:21+08:00 gatekeeper configd.py 576 - [meta sequenceId="320412"] [fc9e6dee-c3f6-4ef5-a659-796fd4f3b88c] retrieve ups status
<13>1 2026-03-10T22:41:22+08:00 gatekeeper configd.py 576 - [meta sequenceId="320413"] [e36178b3-2ced-4e46-b360-ddb4648b0fcd] request ifconfig
<13>1 2026-03-10T22:41:22+08:00 gatekeeper configd.py 576 - [meta sequenceId="320414"] [f7d90328-6015-494d-a367-9ed7dbeecf92] list gateway status

Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on March 10, 2026, 05:43:23 PM
Busy dashboard open perhaps?
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: meyergru on March 10, 2026, 07:35:46 PM
I saw this, too. The culprit may be the HomeAssistant OPNsense plugin. In its default settings, it scans every 30 seconds.

Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: lmoore on March 11, 2026, 02:26:53 AM
Quote from: meyergru on March 10, 2026, 07:35:46 PMI saw this, too. The culprit may be the HomeAssistant OPNsense plugin. In its default settings, it scans every 30 seconds.


I don't use HomeAssistant so I can rule that one out.

My dashboard hasn't changed in quite a long time, so I can't attribute this to any changes there.

I'm also seeing a file being created at 1-minute past the hour, every hour. I suspect this is coming from 'List syslog applications'

-rw-------  1 root wheel  996 Mar 10 20:01:00 2026 /tmp/tmpcfd_4lh8ob0g
-rw-------  1 root wheel  996 Mar 10 21:01:00 2026 /tmp/tmpcfd_9huvt4nu
-rw-------  1 root wheel  996 Mar 10 22:01:00 2026 /tmp/tmpcfd_at5fi5vz
-rw-------  1 root wheel  996 Mar 10 23:01:00 2026 /tmp/tmpcfd_qv73ag34
-rw-------  1 root wheel  996 Mar 11 00:01:00 2026 /tmp/tmpcfd_gi8c4loh
-rw-------  1 root wheel  996 Mar 11 01:01:00 2026 /tmp/tmpcfd_9kffqpd0
-rw-------  1 root wheel  996 Mar 11 02:01:00 2026 /tmp/tmpcfd_x9_d4gxs
-rw-------  1 root wheel  996 Mar 11 03:01:00 2026 /tmp/tmpcfd_t8q1_nka
-rw-------  1 root wheel  996 Mar 11 04:01:00 2026 /tmp/tmpcfd_dhdxd_yw
-rw-------  1 root wheel  996 Mar 11 05:01:00 2026 /tmp/tmpcfd_3mxtse4h
-rw-------  1 root wheel  996 Mar 11 06:01:00 2026 /tmp/tmpcfd_vjq5o7w2
-rw-------  1 root wheel  996 Mar 11 07:01:00 2026 /tmp/tmpcfd_8s7x39sc
-rw-------  1 root wheel  996 Mar 11 08:01:00 2026 /tmp/tmpcfd_8wjw98ip
-rw-------  1 root wheel  996 Mar 11 09:01:00 2026 /tmp/tmpcfd_zd1xusvd

This is what's in these files:

{"captiveportal":"portalauth (captiveportal)","audit":"audit (audit)","configd.py":"configd (configd.py)","kernel":"kernel (kernel)","lighttpd":"lighttpd (lighttpd)","pkg":"pkg (pkg)","pkg-static":"pkg (pkg-static)","ppp":"ppps (ppp)","unbound":"resolver (unbound)","routed":"routing (routed)","olsrd":"routing (olsrd)","zebra":"routing (zebra)","ospfd":"routing (ospfd)","bgpd":"routing (bgpd)","hostapd":"wireless (hostapd)","ddclient":"ddclient (ddclient)","dhcpd":"dhcpd (dhcpd)","dhcrelay":"dhcrelay (dhcrelay)","dnsmasq":"dnsmasq (dnsmasq)","dpinger":"gateways (dpinger)","hostwatch":"hostwatch (hostwatch)","charon":"ipsec (charon)","kea-dhcp4":"kea (kea-dhcp4)","kea-dhcp6":"kea (kea-dhcp6)","kea-ctrl-agent":"kea (kea-ctrl-agent)","monit":"monit (monit)","ntp":"ntpd (ntp)","ntpd":"ntpd (ntpd)","ntpdate":"ntpd (ntpdate)","openvpn":"openvpn (openvpn)","firewall":"firewall (firewall)","filterlog":"filter (filterlog)","suricata":"suricata (suricata)","wireguard":"wireguard (wireguard)"}
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on March 11, 2026, 07:40:42 AM
That would be:

https://github.com/opnsense/core/blob/808eb42311f2b68f0ee4fae02c4b5e10191093c9/src/opnsense/service/conf/actions.d/actions_syslog.conf#L1-L6

I have to ask Ad for an opinion on this.


Cheers,
Franco
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on March 11, 2026, 11:29:14 AM
Can you try this patch and see if that's better?

    # opnsense-patch https://github.com/opnsense/core/commit/914e5a20e
    # rm /tmp/tmpcfd_*
    # service configd restart

One lingering file for each cache is expected.  On my end that's 11 files after a reboot. Shouldn't grow that substantially anymore.


Cheers,
Franco
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: meyergru on March 11, 2026, 11:40:13 AM
Yup. 11 lingering files for me, as well. Intermediately, new ones get created and then deleted again.

BTW: I could not even use the rm command, because with >36.000 files, the command line was too long.
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on March 11, 2026, 01:27:11 PM
Ok, we decided to release this patch into today's 26.1.4.  Almost there.  :)


Thanks,
Franco
Title: [SOLVED] Re: Large number of files accumulating in /tmp with name beginning with tmp
Post by: lmoore on March 12, 2026, 02:40:07 AM
Quote from: franco on March 11, 2026, 11:29:14 AMCan you try this patch and see if that's better?

    # opnsense-patch https://github.com/opnsense/core/commit/914e5a20e
    # rm /tmp/tmpcfd_*
    # service configd restart

One lingering file for each cache is expected.  On my end that's 11 files after a reboot. Shouldn't grow that substantially anymore.


Thank you Franco.

I applied the patch as instructed and left it for a while. I observed two of these files in /tmp after the hour rolled over.

I later updated to 26.1.4 and also left it for a while. I now have the 11 files in /tmp

Cheers,

Larry.
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on March 12, 2026, 09:03:51 AM
Great, thanks again for the report!


Cheers,
Franco
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: lmoore on July 14, 2026, 05:01:21 AM
Quote from: franco on March 12, 2026, 09:03:51 AMGreat, thanks again for the report!


Cheers,
Franco

OPNsense 26.1.11_6

Deja vu

% ls -l /tmp/tmpcfd_* | wc -l
    9339
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on July 14, 2026, 03:23:34 PM
My end shows 16. What's the content of the files? A lot of the same?

# md5sum /tmp/tmpcfd_* | awk '{ print $1 }' | sort | uniq -c | sort -rn


Cheers,
Franco
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: lmoore on July 14, 2026, 05:57:09 PM
Quote from: franco on July 14, 2026, 03:23:34 PM# md5sum /tmp/tmpcfd_* | awk '{ print $1 }' | sort | uniq -c | sort -rn

Hi Franco,

Here are the results.

Quote9331 d41d8cd98f00b204e9800998ecf8427e
  2 d8a70aede1c95108c0296f6a6abfebaa
  1 db76c9261e5dad81b34d8d7d48a9002f
  1 b253f2bcc48d5ccd8d9652904a6131a0
  1 a3ed12d95eaf83edc4055da9c8aebf8f
  1 9f52409143ef46ab2ee11604782c2ddf
  1 86bd9ded6a0fbd4a09404a43cfc743b3
  1 7ef1d48bb1e01cee7fcccaa91ad54799
  1 761219420eb10521cf4087b6912ba82b
  1 70706585f8924f2a30bc3cb176e6976f
  1 5f428cbec633eaa1410f433bbafb2d08
  1 5eede87a3adb1956a1312c4d97ab0b5a
  1 58e0494c51d30eb3494f7c9198986bb9
  1 4df0fd0be6ddaddf44fc689c489a14ea
  1 2ec68f745b73b7403f0852ed559e9430
  1 24b23c602450824808ff0221c6923377
  1 1c01c224b68add24f6c6ba2e6afe9273

The vast majority of 0 byte files were created on the 8th of July with the first one being at 15:21:21.

The time stamp for dmesg.boot is 'Jul  8 13:04:55 2026' and uptime is: 11:55PM  up 6 days, 10:50

On the 8th of July we had an extended power outage commencing in the morning. The power was restored around 1:00 PM.

I updated OPNsense from 26.1.11_5 to 26.1.11_6 recently and I believe it was after the power event.

Is there a command to list the time the updates were installed?

I'll reboot OPNsense so the /tmp folder is cleared.

Reviewing System -> Log Files -> Backend and filtered the Error events using '2026-07-08T15:2'.

Between 15:21:21 and 15:29:59, there were 1992 entries which appear to be all the same except for the GUID in the 4th column. I'm including only one line.

Quote2026-07-08T15:21:21    Error    configd.py    [f83c44bd-7bb0-443d-975c-a47f6f5953f6] Script action failed with Command '/usr/local/opnsense/scripts/filter/read_log.py --limit '1000' --digest '9eb69a9b6e1717db6f9b0b7ecd7ba451'' returned non-zero exit status 1. at Traceback (most recent call last):  File "/usr/local/opnsense/service/modules/actions/script_output.py", line 93, in execute    subprocess.run(script_command, env=self.config_environment, shell=True,    ~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^                    check=not self.disable_errors, stdout=output_stream, stderr=error_stream)                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^  File "/usr/local/lib/python3.13/subprocess.py", line 577, in run    raise CalledProcessError(retcode, process.args,                              output=stdout, stderr=stderr) subprocess.CalledProcessError: Command '/usr/local/opnsense/scripts/filter/read_log.py --limit '1000' --digest '9eb69a9b6e1717db6f9b0b7ecd7ba451'' returned non-zero exit status 1.

Cheers,

Larry.
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on July 14, 2026, 09:07:14 PM
Hi Larry,

Thanks, we're looking into it.

Just wondering what d8a70aede1c95108c0296f6a6abfebaa is... would you mind checking this out?

# md5sum /tmp/tmpcfd_* | grep d8a70aede1c95108c0296f6a6abfebaa

And see what the content is of these files (if they are still on your disk)?


Thanks,
Franco
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: lmoore on July 15, 2026, 04:09:27 AM
Hi Franco,

These two files returned immediately after rebooting at 00:03. Since looking at the time stamp on these files and extracting more detail, one of the files was updated at 9:52:28 - the content is the same.

I'm only using IPv4.

{"WAN_DHCP":"WAN_DHCP - <ISP Gateway IP>","Null6":"Null6 - ::1","Null4":"Null4 - 127.0.0.1","WAN_DHCP6":"WAN_DHCP6 - inet6"}
WAN Configuration:

    <wan>
      <if>re0</if>
      <descr>WAN1</descr>
      <enable>1</enable>
      <lock>1</lock>
      <spoofmac/>
      <blockpriv>1</blockpriv>
      <blockbogons>1</blockbogons>
      <ipaddr>dhcp</ipaddr>
      <dhcphostname/>
      <alias-address/>
      <alias-subnet>32</alias-subnet>
      <dhcprejectfrom/>
      <adv_dhcp_pt_timeout/>
      <adv_dhcp_pt_retry/>
      <adv_dhcp_pt_select_timeout/>
      <adv_dhcp_pt_reboot/>
      <adv_dhcp_pt_backoff_cutoff/>
      <adv_dhcp_pt_initial_interval/>
      <adv_dhcp_pt_values>SavedCfg</adv_dhcp_pt_values>
      <adv_dhcp_send_options>dhcp-lease-time 3600</adv_dhcp_send_options>
      <adv_dhcp_request_options>subnet-mask, routers</adv_dhcp_request_options>
      <adv_dhcp_required_options>subnet-mask, routers</adv_dhcp_required_options>
      <adv_dhcp_option_modifiers/>
      <adv_dhcp_config_advanced>advanced</adv_dhcp_config_advanced>
      <adv_dhcp_config_file_override/>
      <adv_dhcp_config_file_override_path/>
    </wan>

Static Routes:

  <staticroutes version="1.0.1" persisted_at="1781743877.78" description="Static routes">
    <route uuid="1762d6b5-3cd6-4390-89f5-d20bee31ec77">
      <network>192.168.0.0/16</network>
      <gateway>Null4</gateway>
      <descr>Null route for RFC-1918</descr>
      <enabled>1</enabled>
    </route>
    <route uuid="58d71ef5-0dcf-4eaf-9925-695c87ae5b71">
      <network>172.16.0.0/12</network>
      <gateway>Null4</gateway>
      <descr>Null route for RFC-1918</descr>
      <enabled>1</enabled>
    </route>
    <route uuid="9aade0c2-8f72-4024-9a84-36d672760c77">
      <network>10.0.0.0/8</network>
      <gateway>Null4</gateway>
      <descr>Null route for RFC-1918</descr>
      <enabled>1</enabled>
    </route>
    <route uuid="545691d1-9ae7-42ca-8072-6b3c6e822f2d">
      <network>fc00::/7</network>
      <gateway>Null6</gateway>
      <descr>Null route for ULA IP's</descr>
      <enabled>1</enabled>
    </route>
  </staticroutes>

System -> Routes -> Log File:

<Empty>
BTW, OPNsense was last updated on the 5th of July.

Cheers,

Larry.
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on July 15, 2026, 08:17:33 AM
Hi Larry,

Ad found the bug that leaves the temp file when the command crashed:

# opnsense-patch https://github.com/opnsense/core/commit/9b0767001e
# service configd restart

The "interface gateways list" command for the second question has several arguments and it may end up caching the same content multiple times in two different files for that reason:

src/opnsense/mvc/app/models/OPNsense/Routes/Route.xml:                <ConfigdPopulateAct>interface gateways list</ConfigdPopulateAct>
src/opnsense/mvc/app/models/OPNsense/Routing/GatewayGroups.xml:                <ConfigdPopulateAct>interface gateways list -l</ConfigdPopulateAct>

These two likely produce the same output most of the time but are different parameters so effectively different calls. I also have two files with the same content.


Cheers,
Franco
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: lmoore on July 15, 2026, 12:16:03 PM
Hi Franco,

Much appreciate your teams prompt action.

Patch applied... I'll keep an eye on /tmp for a while.

Cheers,

Larry.
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: Copprhead on July 19, 2026, 05:29:20 PM
I have the same(?) problem with recently updated 25.1.12. /tmp full of files tmpcfd_* filling up the disk. The system felt slow and I rebootet it. It got stuck on reboot at the point where it deletes /tmp/*. It took a couple of hours to delete all the files.
Now with an uptime of 5 minutes there are already.

Any chance to get a patch for this older version?
Title: Re: Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on July 20, 2026, 09:40:11 AM
The patches are in this thread, but you should really update to the maintained version instead.


Cheers,
Franco
Title: Re: [SOLVED] Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: lmoore on July 22, 2026, 04:42:42 PM
OPNsense had been up for 7 days since the patch was applied and no problems observed.

Rebooted it 10-hours ago and all is looking well in /tmp.

Thank you.
Title: Re: [SOLVED] Large number of files accumulating in /tmp with name beginning with tmpcfd_
Post by: franco on July 24, 2026, 07:55:03 AM
Hey Larry,

Nice, thank you for the follow up.  :)


Cheers,
Franco