Messages

THX for this thread, this service was eating all my memory. after disabling it the usage was immediately at 28%, what a great solution to roll this out for all as fix implemented and started service............

it seems like your opnsense blocks outgoing traffic for DNS. you try to ping 8.8.8.8 but DNS ist not ICMP related. I would suggest to test it like this:
Disable the packet filter for short time and try to resolve a domain name via dig. If this works the problem is that opnsense is blocking your dns queries. Please turn on the filter again after testing!!! You can also do a live view in the logs while trying do resolve domain names. DNS queries are working via UDP port 53, try creating a rule for adguard to be alloewd for this traffic.  BR

what settings do you use? Enable syncookies : always ?

I have it set to "adaptive"  start 60, end 30, and whatsapp, facebook etc all is working fine.

I used always, which caused problems.
Now i use 50/25 which works fine

i turned off the "DDOS protection" - syncookies.
Now whats app web is working again :)
When i turn it on again the page will not load.

I am facing the same Issue with WhatsApp after updating opnsense  to latest Version.

This would be a very useful feature also for me!!

i get results immediately with every kind of filter selected!

HI,

i updated today and just tested it and i do not have this issue.

BR

OK, I have searched, and I have not seen this issue, I am sure that I am overlooking something (hopefully simple).

I have installed Graylog 4.3 + Mongo 4.2 + Elasticsearch 7.17. I have setup inputs (and extractors), indices, and streams in GrayLog, I have this on port 1514 and then created a logging target in OpnSense UDP(4) everything left as default except the hostname and port. I see ingress and I can see the logs and messages, communication seems to be working.

My problem is that the logs are not human readable. It seems like there is encoding that is happening and I am not sure how to work it out. This is what a log looks like in GrayLog:

Code Select Expand

2022-05-25 16:52:25.651 172.17.0.1
�>�b�^�
J�
\���l��PJS0


G�0�0��5�@"P���JS0


M�0�05�)

k

Any ideas?

Thanks!

*** UPDATE ***

I configured a Unifi Controller to send syslogs and in GrayLog they ARE human readable. So, it appears that it is something with OpnSense.

i had the same problem.
it was solved after disabling "SYSTEM: SETTINGS: LOGGING / TARGETS" and restarting the telegraf service and enabling my object in "SYSTEM: SETTINGS: LOGGING / TARGETS" again.