wan interface loses ipv4 address, dhclient hung running script

[termdex]

I just recently replaced pfSense with OPNsense and have been very happy with what I've seen so far.

However, I find occasionally the wan interface loses its dhcp-supplied ipv4 address. Interestingly, it keeps its dhcp-pd supplied IPv6 prefix, which kind of makes sense since it's a different daemon, and I've configured the system to not use dhcpv4 for IPv6 addressing.

When I run 'tcpdump' on the wan interface, I can see the isp's router arp'ing for my address but my wan interface never responds because the local dhcp client has unconfigured the address from the interface. However, when I click to force renewal, I never see the 'discover' packet from dhclient.

This led me to wonder if there's something wrong with dhclient, and in fact when I run 'ps' I see this:
# ps axw | grep dhcl
63080  -  Is      0:00.00 dhclient: em1 [priv] (dhclient)
67821  -  I       0:00.00 /bin/sh /usr/local/sbin/dhclient-script.ext

Where I would normally expect to see:
# ps awx | grep dhcl
16473  -  Is    0:00.00 dhclient: em1 [priv] (dhclient)
26318  -  Ss    0:00.00 dhclient: em1 (dhclient)

Presumably with the script running so briefly it wouldn't likely be caught with 'ps'.

Hoping to see what dhclient is failing to do, I try to check the log files for details. However, I find the dhcpd.log has some garbage at the end as well as has the exact same file size as many other log files, leading me to think these are circular log files.

If these are indeed circular log files, is there a recommended way to view them for troubleshooting purposes?

In any case, rebooting the entire system generally clears up the wan dhclient problem for another day or so; I've seen it fail again within 24 hours, but most recently it took 2 days before reoccurring.

Any ideas on what could be happening with dhclient until I find a proper way to investigate the log files?

Thanks,

[phoenix]

I haven't done much investigation on this but I do have the same problem that I resolve by resetting the interface (with a script) as a temporary measure, you might like to take a look at this thread: https://forum.opnsense.org/index.php?topic=5511.0;topicseen