Messages

1

23.7 Legacy Series / How to read the exported Insights

« on: September 07, 2023, 10:06:41 am »

I exported the reports from Insights but I can't find any documentation on the content and how to read them.
I attached a sample HTTPS session, and changed the IP to the corresponding machine label.

Here are my queries:
1. What does the last_seen column defines? Is it the actual time when those traffic was captured? If not, what does it define? I'm asking because I noticed the entire session completes immediately, which is impossible as the http session is firing a report page action (load/edit data) that would take some time to return the results.

2. What is the octets column for? Is this the size of the data being send/received in bytes?

3. em4 is my WAN interface and em3 my LAN interface.
- What does the in and out means for each interface?
- If in = into the interface, out = out of the interface, How do I read the entries in the attached, assuming it is sorted?

2

22.7 Legacy Series / Curl to Backup API link always timeout

« on: June 15, 2023, 06:32:48 am »

Hi All

I'm new to OPNSense and been playing around with it for a about a day.
I'm trying to get automated backup working using API.

I've installed the os-api-backup, created a group called backup with Backup API privileges, created a user and assigned to the backup group. I went through several post in the forum and used a script that was shared (see this https://forum.opnsense.org/index.php?topic=18218.0)

However I'm not getting any result.
I ran the curl command directly and noticed I'm getting time out error.

curl -u "keyabc":"secret123" https://1.2.3.4/api/backup/backup/download
curl: (7) Failed to connect to 1.2.3.4 port 443: Connection timed out

When I supply the URL to the browser, the file config.xml downloads.
I am able to run curl from my Laptop (where I access the URL link directly).
I get time out in my Linux Server (same subnet as firewall LAN)

The firewall only has two default rules:
        IPv4 *   LAN net   *   *   *   *   *   Default allow LAN to any rule      
        IPv6 *   LAN net   *   *   *   *   *   Default allow LAN IPv6 to any rule

Is there something else that needs to be done?