Eastpect and file system full

[fabianodelg]

Hi everyone,

this morning, during my usual checks I find out that I was unable to add any record to a whitelist for a specific policy.

I ssh'ed into my OPNsense and a dmesg showed the following:

pid 998 (eastpect), uid 0 inumber 29 on /usr/local/sensei/output/active/temp: filesystem full (repeated a number of times).

The output of a df gave me:

root@Router:/usr/local/sensei/output/active/temp # df
Filesystem      1K-blocks    Used    Avail Capacity  Mounted on
/dev/gpt/rootfs  47628560 5021924 38796352    11%    /
devfs                   1       1        0   100%    /dev
devfs                   1       1        0   100%    /var/dhcpd/dev
devfs                   1       1        0   100%    /var/unbound/dev
/dev/md43           49180      48    45200     0%    /usr/local/sensei/output/active/temp
root@Router:/usr/local/sensei/output/active/temp #

while the content of /usr/local/sensei/output/active/temp show the following:

root@Router:/usr/local/sensei/output/active/temp # ls -l
total 64
drwxrwxr-x  2 root  operator    512 Aug  6 10:29 .snap
-rw-------  1 root  wheel      4083 Aug 10 10:06 0_alert_46.ipdr
-rw-------  1 root  wheel      8175 Aug 10 10:06 0_conn_45.ipdr.ready
-rw-------  1 root  wheel      1356 Aug 10 10:06 0_conn_46.ipdr
-rw-------  1 root  wheel     35457 Aug 10 10:06 0_dns_15.ipdr
-rw-------  1 root  wheel      3190 Aug 10 10:06 0_http_47.ipdr
-rw-------  1 root  wheel      1256 Aug 10 10:06 0_tls_12.ipdr
root@Router:/usr/local/sensei/output/active/temp #

As you can see from below, the partition is 48M, allocated 44K and has 0% capacity left.

Did someone experience a similar behavior? While it doesn't seem that the filtering functionality -or reporting- are affected, the UI definitely is -at least when it comes to add IP address in a whitelist-.

Is this a bug?

Thanks

[beki]

Hi fabianodelg,

Increasing the temp disk size may solve your problem. Please refer to the links: https://www.zenarmor.com/docs/support/troubleshooting/sensei-stops-because-of-high-disk-usage
and
https://www.zenarmor.com/docs/opnsense/configuring/reporting-data#size-of-the-fast-temporary-memory-disk-in-megabytes--capacity

Looking forward to the good news.
Be safe

[fabianodelg]

Thank you very much Beki, I think that may do the trick. I've just expanded the default to 500 MB.

Thanks for your help,
Fabiano