Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - Yusoff

#1
23.7 Legacy Series / How to read the exported Insights
September 07, 2023, 10:06:41 AM
I exported the reports from Insights but I can't find any documentation on the content and how to read them.
I attached a sample HTTPS session, and changed the IP to the corresponding machine label.

Here are my queries:
1. What does the last_seen column defines? Is it the actual time when those traffic was captured? If not, what does it define? I'm asking because I noticed the entire session completes immediately, which is impossible as the http session is firing a report page action (load/edit data) that would take some time to return the results.

2. What is the octets column for? Is this the size of the data being send/received in bytes?

3. em4 is my WAN interface and em3 my LAN interface.
- What does the in and out means for each interface?
- If in = into the interface, out = out of the interface, How do I read the entries in the attached, assuming it is sorted?
#2
Hi All

I'm new to OPNSense and been playing around with it for a about a day.
I'm trying to get automated backup working using API.

I've installed the os-api-backup, created a group called backup with Backup API privileges, created a user and assigned to the backup group. I went through several post in the forum and used a script that was shared (see this https://forum.opnsense.org/index.php?topic=18218.0)

However I'm not getting any result.
I ran the curl command directly and noticed I'm getting time out error.

Quotecurl -u "keyabc":"secret123" https://1.2.3.4/api/backup/backup/download
curl: (7) Failed to connect to 1.2.3.4 port 443: Connection timed out

When I supply the URL to the browser, the file config.xml downloads.
I am able to run curl from my Laptop (where I access the URL link directly).
I get time out in my Linux Server (same subnet as firewall LAN)

The firewall only has two default rules:
        IPv4 *   LAN net   *   *   *   *   *   Default allow LAN to any rule      
        IPv6 *   LAN net   *   *   *   *   *   Default allow LAN IPv6 to any rule

Is there something else that needs to be done?