Messages

Can you try moving the wan side out of a private adres range ?
I had the same problem with lan & wan sitting in privatte adres ranges even with the "block private adresses" unchecked. Never bothered to find out what went wrong. Anybody figured it out ?

Hey,

What sort of adapters are you using in your OPNsense VM, i had troubles with the VMX Adapters, beter to use the e1000. Had exactly the same problem yesterday made a new VM but now with e1000 and all working fine now.

Syd

Quick update,

It works again

-rw-------   1 root   wheel   3.6M Jun 22 13:51 flowd.log

Is recreated and updating.
@ Franco If you want i could send you the faulty flowd.log, it is quit big 2.7 gig.

Thanx for pointing me in the right dir.

Grtz

Syd

Hey Franco,

Code Select Expand

root@mono:~ #  ls -lah /var/log/flowd.*
-rw-------  1 root  wheel   2.8G Jun 21 22:32 /var/log/flowd.log
-rw-------  1 root  wheel    11M Jun  5 19:58 /var/log/flowd.log.000001
-rw-------  1 root  wheel    11M Jun  5 16:28 /var/log/flowd.log.000002
-rw-------  1 root  wheel    11M Jun  5 12:51 /var/log/flowd.log.000003
-rw-------  1 root  wheel    11M Jun  5 10:17 /var/log/flowd.log.000004
-rw-------  1 root  wheel    11M Jun  5 06:15 /var/log/flowd.log.000005
-rw-------  1 root  wheel    11M Jun  5 01:15 /var/log/flowd.log.000006
-rw-------  1 root  wheel    11M Jun  4 21:41 /var/log/flowd.log.000007
-rw-------  1 root  wheel    11M Jun  4 18:02 /var/log/flowd.log.000008
-rw-------  1 root  wheel    11M Jun  4 14:38 /var/log/flowd.log.000009
-rw-------  1 root  wheel    11M Jun  4 11:58 /var/log/flowd.log.000010
root@mono:~ # df -h
Filesystem     Size    Used   Avail Capacity  Mounted on"+

/dev/da0s1a     31G    4.3G     24G    15%    /
devfs          1.0K    1.0K      0B   100%    /dev
devfs          1.0K    1.0K      0B   100%    /var/dhcpd/dev+


Will get rid of -rw-------  1 root  wheel   2.8G Jun 21 22:32 /var/log/flowd.log
and see if it recreats it.

Grtz

Syd

Hi,

The files that where in /var/netflow didn't change from the time the problem started, i turned netflow of removed all the files and turned it back on. It recreated the files again, but it still doesn't work.

This is the new dir:

Code Select Expand

total 140
drwxr-x---   2 root  wheel   1.0K Jun 18 10:25 .
drwxr-xr-x  29 root  wheel   512B Jun  1 06:43 ..
-rw-r-----   1 root  wheel    12K Jun 18 10:11 dst_port_000300.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 dst_port_003600.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 dst_port_086400.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 interface_000030.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 interface_000300.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 interface_003600.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 interface_086400.sqlite
-rw-r-----   1 root  wheel     0B Jun 18 10:11 metadata.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 src_addr_000300.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 src_addr_003600.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 src_addr_086400.sqlite
-rw-r-----   1 root  wheel    12K Jun 18 10:11 src_addr_details_086400.sqlite


Any clues ?

Hey franco,

First thnx for the help,

total 72172
drwxr-x---   2 root  wheel   512B Jun 12 20:43 .
drwxr-xr-x  29 root  wheel   512B Jun  1 06:43 ..
-rw-r-----   1 root  wheel   196K Jun  5 22:06 dst_port_000300.sqlite
-rw-r-----   1 root  wheel   432K Jun  5 22:06 dst_port_003600.sqlite
-rw-r-----   1 root  wheel   748K Jun  5 22:06 dst_port_086400.sqlite
-rw-r-----   1 root  wheel   2.1M Jun  5 22:13 interface_000030.sqlite
-rw-r-----   1 root  wheel   1.5M Jun  5 22:06 interface_000300.sqlite
-rw-r-----   1 root  wheel   252K Jun  5 22:06 interface_003600.sqlite
-rw-r-----   1 root  wheel    28K Jun  5 22:06 interface_086400.sqlite
-rw-r-----   1 root  wheel   8.0K Jun  5 22:06 metadata.sqlite
-rw-r-----   1 root  wheel   616K Jun  5 22:06 src_addr_000300.sqlite
-rw-r-----   1 root  wheel   2.9M Jun  5 22:06 src_addr_003600.sqlite
-rw-r-----   1 root  wheel   9.2M Jun  5 22:06 src_addr_086400.sqlite
-rw-r-----   1 root  wheel    52M Jun  5 22:06 src_addr_details_086400.sqlite

is my /var/netflow

Hello Franco,

Running:
OPNsense 16.1.17-amd64
FreeBSD 10.2-RELEASE-p18
OpenSSL 1.0.2h 3 May 2016

On esxi 5.5 started with config of monowall in early time of opnsense and updated along the way.
No scheduled backups

Just upgraded to 16.1.17 problem is still there.
Anybody ??

Hello all,

After a reboot, insight stopt working. I get "No Data Available"
I'm also sending netflow data to prtg that is still working fine.
I have try-ed to populate the data in the netflow tab again.
No messages in the syslog, any ideas where to look ?

Syd