Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - wizziLalev

#1
Sorry, my bad, all links are updated
#2
Yes it is strange and started from nowhere. I'm attaching logs and screenshots of DHCP config. All other configs are 100% default, no customizations etc. - using that box more as router than as FW.

---> logs <---
---> config <---

Will be grateful if someone give me idea what is going on, most of the portable devices are using WiFi at home and WAF just dropped a lot.

Best,
#3
Hi,
May I assume that 192.168.0.11 is your OPNSense box and c4:ad:34:b6:ae:75 is a client inside your LAN? If yes, I'm seeing the same issue, all DHCP leases are being renewed wayyy too often and that cause some of my IOT devices to go crazy.

Not only that but laptops/phones at home which are using the same DHCP pool are affected also and their connection drop all the time for few seconds until their IP is being renewed.

Worst thing is I didn't change anything, currently running latest version of OPNSense and updating to it was last change in like 2 weeks.
#4
@franco, any clue?
#5
Hi franco,

Here it is:


root@opnsense:~ # ls -lah /var/netflow/*
-rw-r-----  1 root  wheel    96K Nov 18 05:01 /var/netflow/dst_port_000300.sqlite
-rw-r-----  1 root  wheel   684K Nov 18 05:01 /var/netflow/dst_port_003600.sqlite
-rw-r-----  1 root  wheel   1.9M Nov 18 05:01 /var/netflow/dst_port_086400.sqlite
-rw-r-----  1 root  wheel   2.5M Nov 18 05:01 /var/netflow/interface_000030.sqlite
-rw-r-----  1 root  wheel   1.1M Nov 18 05:01 /var/netflow/interface_000300.sqlite
-rw-r-----  1 root  wheel   116K Nov 18 05:01 /var/netflow/interface_003600.sqlite
-rw-r-----  1 root  wheel    16K Nov 18 05:01 /var/netflow/interface_086400.sqlite
-rw-r-----  1 root  wheel    12K Nov 10 20:57 /var/netflow/metadata.sqlite
-rw-r-----  1 root  wheel   160K Nov 18 05:01 /var/netflow/src_addr_000300.sqlite
-rw-r-----  1 root  wheel   364K Nov 18 05:01 /var/netflow/src_addr_003600.sqlite
-rw-r-----  1 root  wheel   384K Nov 18 05:01 /var/netflow/src_addr_086400.sqlite
-rw-r-----  1 root  wheel   7.8M Nov 18 05:01 /var/netflow/src_addr_details_086400.sqlite



root@opnsense:~ # ls -lah /var/log/flowd*
-rw-------  1 root  wheel   7.6M Nov 10 20:41 /var/log/flowd.log
-rw-------  1 root  wheel    11M Nov  9 03:26 /var/log/flowd.log.000001



root@opnsense:~ # df -h
Filesystem           Size    Used   Avail Capacity  Mounted on
/dev/ufs/OPNsense     27G    1.0G     24G     4%    /
devfs                1.0K    1.0K      0B   100%    /dev
devfs                1.0K    1.0K      0B   100%    /var/dhcpd/dev
#6
Hi @franco,

This is my hardware:

Athlon II x4 @3.00Ghz (I know it is old cpu but it still ticks)
8GB RAM DDR3 @1033Mhz
4x1Gbps interfaces
100Mbps internet connection
6 devices connected via switch (5 SBCs + 1AP)
3 wireless connected devices

Pure installation with very simple configuration, nothing major.

The traffic overall is not exceeding 40Mbps because most of the devices are in idle.

Just before latest update everything was perfect 1~2% CPU load, 500~700MB RAM usage and stable network.

I've already try to disconnect everything just to confirm that the connected devices are not causing the problem, but the result stay all the same.

Cheers,
Lalev
#7
up - the issue still persist and I really want to fix it - almost constantly my cpu is under full load and this slows the entire firewall and my network also.

I can provide more information if it is needed - but I need a clue for what to look...
#8
Any other ideas? Anyone?
#9
Hi Bart,
Thanks for advice, but the situation is the same, even after new restart.
Any other ideas? The same process is using ~100% of my cpu again.

Best,
Lalev
#10
Hi all,
Just after updating to the last release I've notice that flowd_aggregate.py process start to use almost 100% of the CPU.

So I start to read different topics here and following is done:
1. All logs are removed and the machine is restarted
2. RRD is disabled
3. The process is being restarted

and still no luck - the cpu usage is still high.

-->screenshot<--

Any ideas are welcome!

Thanks!
#11
Anyone? As far as I know this setup is not the best approach, but possible.
#12
General Discussion / Complicated network topology
May 19, 2017, 12:05:58 PM
Hello to all!

I'm using OPNsense from few mounts now and I love it! But I want to make my home network just a little bit more organized and I need your help because I'm lost...

Recently I've manage to get HP ProCurve 2626 (J4900C) for $10 from eBay and after resurrecting one old HP 6005 Pro (AMD ATHLON II X4 645, 16GB Ram, 2x2TB HDDs) I'm ready to start!

That is old hardware - I know that, also there will be issues like old firmware, etc. - I know that also - but for the moment I can't invest any money to make it better, so I need to work with what I have.

So after few days of cleaning dust, changing thermal paste and preparing small place where to put everything I want to make something which will work and will be practical, so here is my idea:


  • Proxmox as main OS
  • OPNsense as guest VM
  • Another VM for few lightweight WEB apps

So far, so good but here is my problem: My machine have only one NIC and I want to use it for so called "router on a stick"

What is my topology:


  • ISP up-link enters my apartment - it's a cat6 cable without modem/router and this cable is connected to one of the Gbe ports of my switch
  • the host machine is connected to the second Gbe port of the switch
  • few ports are occupied by dummy APs, 2 PC and 3 SBC's

What is my issue:
I don't know how to set all VLANs and briges correctly so the OPNsense VM to act as normal router so, all hardwired/wireless devices to get their IP from OPNsense's DHCP, and all other VMs to be able to access internet also.

So I'm open for any ideas/suggestions/comments!

P.S. Please check attached diagram