Messages

Hi BNacl,
I think the drill-down feature is not available for `Others` since it may have a large number of items.
You may try the filtering capability on Live Sessions Explorer.
https://www.zenarmor.com/docs/opnsense/reporting-analytics/live-session-explorer#search

Hi FullyBorked,

You are right. Export CSV feature is available on Paid subscriptions.

https://www.zenarmor.com/docs/opnsense/reporting-analytics/live-session-explorer#exporting-csv

Hi REH,
A new test kernel is developed to solve the netmap LAGG issue.
https://forum.opnsense.org/index.php?topic=32114.0

Can you try it and provide feedback?
Thanks

You must enable the Captive portal on your OPNsense and then define user-based filtering rules.
These guides may help you:

https://www.zenarmor.com/docs/guides/user-based-filtering-using-opnsense-captive-portal

https://www.zenarmor.com/docs/network-security-tutorials/how-to-configure-captive-portal-on-opnsense

[The more tests we can do, the higher chance to catch any missing bugs and solve all issues.]

Hi all,

For several weeks, some Suricata and Zenarmor users have been experiencing packet stalls with VLAN/LAGG interface due to netmap bugs.

To solve these issues and introduce netmap enhancements to FreeBSD, Zenarmor, and OPNsense teams have collaborated with Klara Systems. Some of the developments have already been included in the FreeBSD 14 development branch.

To ship enhancements to OPNsense, last week, the OPNsense team shipped a test kernel.

You may easily install the test kernel:

# opnsense-update -zkr 23.1-netmap
# opnsense-shell reboot

We've also run some tests on our side and with some of Zenarmor users. So far so good. The "results" (or rather their absence) seem promising. There are no crashes, no regressions, and no reliability issues.

Thank you to the developers who are contributing to the project and putting in significant work.  However, they need community cooperation now to test and spot and address any remaining issues.

The more tests we can do, the higher chance to catch any missing bugs and solve all issues.

Therefore, any help will be greatly appreciated. Please, join the tests and give feedback.

https://forum.opnsense.org/index.php?topic=32114.0
https://forum.opnsense.org/index.php?topic=32185.0

Best

[The more tests we can do, the higher chance to catch any missing bugs and solve all issues.]

Hi all,

For several weeks, some Suricata and Zenarmor users have been experiencing packet stalls with VLAN/LAGG interface due to netmap bugs. 

To solve these issues and introduce netmap enhancements to FreeBSD, Zenarmor, and OPNsense teams have collaborated with Klara Systems. Some of the developments have already been included in the FreeBSD 14 development branch.

To ship enhancements to OPNsense, last week, the OPNsense team shipped a test kernel.

You may easily install the test kernel:

# opnsense-update -zkr 23.1-netmap
# opnsense-shell reboot

We've also run some tests on our side and with some of Zenarmor users. So far so good. The "results" (or rather their absence) seem promising. There are no crashes, no regressions, and no reliability issues.

Thank you to the developers who are contributing to the project and putting in significant work.  However, they need community cooperation now to test and spot and address any remaining issues. 

The more tests we can do, the higher chance to catch any missing bugs and solve all issues.

Therefore, any help will be greatly appreciated. Please, join the tests and give feedback.

https://forum.opnsense.org/index.php?topic=32114.0
https://forum.opnsense.org/index.php?topic=32185.0

Best

Hi pascthin,
Could you send a bug report?
https://www.zenarmor.com/docs/support/reporting-bug

Hi dinguz,
You may try to increase temp size by following the steps in the guide:

https://www.zenarmor.com/docs/opnsense/configuring/reporting-data#size-of-the-fast-temporary-memory-disk-in-megabytes--capacity

Could you send a bug report?
https://www.zenarmor.com/docs/support/reporting-bug

Hi c-mu,
Though I don't think that it is the reason for high ram usage, check whether "Anonymize IP address" option is enabled in your Zenarmor Configuration. It's located under Configuration -> Reports & Data -> Reports Data Management.  When you disable the option, it will fix the unique devices count.

Hi xeronine,

You can check the article: https://www.zenarmor.com/docs/network-security-tutorials/how-to-block-youtube-on-opnsense

Also, official documentation may be helpful: https://www.zenarmor.com/docs/opnsense/policies/web-control-rules

Hi marcelmah,

Can you try with tcpdump when Sensei is active? If there is no packet with tcpdump as well, then take the bypass Sensei Packet Engine (Status - Services - Packet Engine - Enter Bypass Mode) and run tcpdump again.

tcpdump -s0 -ni wg0 -vvv

Hi fabianodelg,

Increasing the temp disk size may solve your problem. Please refer to the links: https://www.zenarmor.com/docs/support/troubleshooting/sensei-stops-because-of-high-disk-usage
and
https://www.zenarmor.com/docs/opnsense/configuring/reporting-data#size-of-the-fast-temporary-memory-disk-in-megabytes--capacity

Looking forward to the good news.
Be safe