Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Intrusion Detection and Prevention
»
out of memory
« previous
next »
Print
Pages: [
1
]
Author
Topic: out of memory (Read 2225 times)
siga75
Full Member
Posts: 185
Karma: 11
out of memory
«
on:
May 31, 2020, 04:51:33 pm »
I just installed Veem for baking up my gaming laptop, which is in WAN in respect of OPNsense, to a NAS in a network with jumbo frame enabled.
The backup is like 300GB and suricata, which is configured to IPS the WAN, keep eating more and more memory.
My system has 16GB RAM and 8GB swap, it freeze for having finished the memory. I can't even login since he can't fork new processes, I had to brutally power it off
In normal operation I have 12GB of free mem.
I don't know if it's a new issue since I never did such big transfers in WAN, or if jumbo frames play something here.
Logged
https://www.signorini.ch
Protectli Pfsense Mi7500L6 Intel 7Th Gen Core I7 7500U 16Gb Ddr4 Ram
512Gb Msata Ssd
6 X Intel Gigabit Ethernet
banym
Sr. Member
Posts: 468
Karma: 31
Free Human Being, FreeBSD, Linux and Mac nerd
Re: out of memory
«
Reply #1 on:
May 31, 2020, 07:22:45 pm »
Jumboframes on WAN should not play a role, since to my knowledge, WAN providers will not support them.
If you try to inspect that mass of data this maybe will bring such problems.
You're sure its correlated to the backup job?
Logged
Twitter: banym
Mastodon: banym@bsd.network
Blog:
https://www.banym.de
siga75
Full Member
Posts: 185
Karma: 11
Re: out of memory
«
Reply #2 on:
June 01, 2020, 10:37:00 am »
Thanks for your reply
- jumboframe is not on WAN, only on another network where the NAS is connected
- WAN of OPNsense is not actually a real WAN, I have an OpenWRT router in between, and here is where my laptop is connected (can be wired or wifi). This router is connected to the ISP supplied modem/router
- Yes, I am sure, I tried 3 times and I see, with "top" command, the memory grow exactly when backup start
Logged
https://www.signorini.ch
Protectli Pfsense Mi7500L6 Intel 7Th Gen Core I7 7500U 16Gb Ddr4 Ram
512Gb Msata Ssd
6 X Intel Gigabit Ethernet
siga75
Full Member
Posts: 185
Karma: 11
Re: out of memory
«
Reply #3 on:
September 06, 2020, 10:59:06 am »
Looks like disabling promiscuous mode solve the issue, probably in that mode all the TCP connection data is kept in memory until the session is closed.
I don't need promiscuous mode in any case, and also backup is faster now
Logged
https://www.signorini.ch
Protectli Pfsense Mi7500L6 Intel 7Th Gen Core I7 7500U 16Gb Ddr4 Ram
512Gb Msata Ssd
6 X Intel Gigabit Ethernet
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Intrusion Detection and Prevention
»
out of memory