Error parsing rule

[macafee]

version:15.1.8.3-c6240d38f (amd64)

There are many errors in system logs.

Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:37:05    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:58    opnsense: /diag_logs_filter_dynamic.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.
Apr 4 22:36:54    opnsense: /diag_logs_filter.php: There was a error parsing rule: . Please report to mailing list or forum.

[ortylp]

I do confirm, I see these too.

Do we have github issue for that?

[franco]

We don't have one yet. I refactored the function and added the actual rule output for debugging purposes: https://github.com/opnsense/core/commit/c37d77bcf7f8e4dc90fe8f5fe76a6939a274c67e

Feel free to create a GitHub issue to better keep track of progress.

[franco]

For me it was an IGMP packet causing the error. I have applied a fix that should work on all rules: https://github.com/opnsense/core/commit/81abe4d18fde1fe0315b153e07c837953617aa53

Let me know if the error disappeared after the next release (don't think we need a github issue now).

[franco]

CARP had the same defect. https://github.com/opnsense/core/commit/1b9a2f2bb3815c035b23ad4ec130aeb8d47d795b