Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Nicolas Quiniou-Briand via PacketFence-users]

On 24/01/2020 16:51, Serhiy Morhun via PacketFence-users wrote:

Do you still want a tcpdump?

Yes.

Peter, feel free to send me a tcpdump too.
--
Nicolas Quiniou-Briand
n...@inverse.ca  ::  +1.514.447.4918 *140  ::  https://inverse.ca
Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence 
(https://packetfence.org) and Fingerbank (http://fingerbank.org)



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Serhiy Morhun via PacketFence-users]

We are public school district and use Packetfence for a Guest/BYOD WiFi
network registration and access.
There are currently ~1350 registered devices, but the number of devices
that are accessing or trying to connect during normal school hours can be
in 3000 range.

Do you still want a tcpdump?





On Fri, Jan 24, 2020 at 10:12 AM Nicolas Quiniou-Briand via
PacketFence-users  wrote:

> Hello,
>
> On 23/01/2020 17:07, Serhiy Morhun via PacketFence-users wrote:
> > Not for us. My fingerbank.log is not filling up with errors anymore, but
> > I still get hourly limit emails within minutes (2-5) of each hour.
>
> 1. How many endpoints do you have on your network ?
> 2. Could you send me in private message result file of following
> command: `tcpdump -nlp -i any -w full.pcap` when you have issue ?
>
> --
> Nicolas Quiniou-Briand
> n...@inverse.ca  ::  +1.514.447.4918 *140  ::  https://inverse.ca
> Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence
> (https://packetfence.org) and Fingerbank (http://fingerbank.org)
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>

-- 



*---***


*THE INFORMATION CONTAINED IN THIS MESSAGE (E-MAIL AND ANY ATTACHMENTS) IS 
INTENDED ONLY FOR THE INDIVIDUAL AND CONFIDENTIAL USE OF THE DESIGNATED 
RECIPIENT(S).*

If any reader of this message is not an intended recipient 
or any agent responsible for delivering it to an intended recipient, you 
are hereby notified that you have received this document in error, and that 
any review, dissemination, distribution, copying or other use of this 
message is prohibited.  If you have received this message in error, please 
notify us immediately by reply e-mail message or by telephone and delete 
the original message from your e-mail system and/or computer database.  
Thank you.


*---*


**NOTICE**:

*You are advised that e-mail correspondence and attachments 
between the public and the Ridgewood Board of Education are obtainable by 
any person who files a request under the NJ Open Public Records Act (OPRA) 
unless it is subject to a specific OPRA exception.  You should have no 
expectation that the content of e-mails sent to or from school district 
e-mail addresses, or between the public and school district officials and 
employees, will remain private.*


*---*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Nicolas Quiniou-Briand via PacketFence-users]

Hello,

On 23/01/2020 17:07, Serhiy Morhun via PacketFence-users wrote:
Not for us. My fingerbank.log is not filling up with errors anymore, but 
I still get hourly limit emails within minutes (2-5) of each hour.


1. How many endpoints do you have on your network ?
2. Could you send me in private message result file of following 
command: `tcpdump -nlp -i any -w full.pcap` when you have issue ?


--
Nicolas Quiniou-Briand
n...@inverse.ca  ::  +1.514.447.4918 *140  ::  https://inverse.ca
Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence 
(https://packetfence.org) and Fingerbank (http://fingerbank.org)



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Serhiy Morhun via PacketFence-users]

Not for us. My fingerbank.log is not filling up with errors anymore, but I
still get hourly limit emails within minutes (2-5) of each hour.




On Thu, Jan 23, 2020 at 10:26 AM Hubert Kupper via PacketFence-users <
packetfence-users@lists.sourceforge.net> wrote:

> Hello,
>
> for us, the update to 1.2.3 seems to work. At least 2 days without the
> fingerbank emails.
>
> Thanks.
> Hubert
>
> Am 21.01.20 um 07:40 schrieb Nicolas Quiniou-Briand via PacketFence-users:
> > Hello,
> >
> > Julien has fixed a bug that generate too many API requests with
> > fingerbank-collector in fingerbank-collector 1.2.3. You can upgrade
> > your  package.
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>

-- 



*---***


*THE INFORMATION CONTAINED IN THIS MESSAGE (E-MAIL AND ANY ATTACHMENTS) IS 
INTENDED ONLY FOR THE INDIVIDUAL AND CONFIDENTIAL USE OF THE DESIGNATED 
RECIPIENT(S).*

If any reader of this message is not an intended recipient 
or any agent responsible for delivering it to an intended recipient, you 
are hereby notified that you have received this document in error, and that 
any review, dissemination, distribution, copying or other use of this 
message is prohibited.  If you have received this message in error, please 
notify us immediately by reply e-mail message or by telephone and delete 
the original message from your e-mail system and/or computer database.  
Thank you.


*---*


**NOTICE**:

*You are advised that e-mail correspondence and attachments 
between the public and the Ridgewood Board of Education are obtainable by 
any person who files a request under the NJ Open Public Records Act (OPRA) 
unless it is subject to a specific OPRA exception.  You should have no 
expectation that the content of e-mails sent to or from school district 
e-mail addresses, or between the public and school district officials and 
employees, will remain private.*


*---*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Hubert Kupper via PacketFence-users]

Hello,

for us, the update to 1.2.3 seems to work. At least 2 days without the 
fingerbank emails.


Thanks.
Hubert

Am 21.01.20 um 07:40 schrieb Nicolas Quiniou-Briand via PacketFence-users:

Hello,

Julien has fixed a bug that generate too many API requests with 
fingerbank-collector in fingerbank-collector 1.2.3. You can upgrade 
your  package.





smime.p7s
Description: S/MIME Cryptographic Signature
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Serhiy Morhun via PacketFence-users]

I stopped fingerbank-collector, updated it to 1.2.3 and restarted it.
It has been 2 hrs and it does not seem to help with API call limits (still
got an email within minutes each hour).
In addition, fingerbank.log is now filling up with the following errors:

Jan 21 08:00:39 rpspacketfence
/usr/local/fingerbank/collector/fingerbank-collector[2393]:
t=2020-01-21T08:00:39-0500 lvl=eror msg="Recovered panic for handler DNS
Handler (63842 Timeout obtaining or releasing lock that came from: \n
git.inverse.ca/inverse/fingerbank-collector/timedlock.(*RWLock).handleTimeout\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/timedlock/rw_lock.go:149\ngit.inverse.ca/inverse/fingerbank-collector/timedlock.(*RWLock).Lock\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/timedlock/rw_lock.go:95\ngit.inverse.ca/inverse/fingerbank-collector/common.(*EndpointData).Copy\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/common/endpoint_data.go:161\ngit.inverse.ca/inverse/fingerbank-collector/common.(*EndpointData).Update\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/common/endpoint_data.go:187\ngit.inverse.ca/inverse/fingerbank-collector/common.(*EndpointData).AddDestinationHost\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/common/endpoint_data.go:251\ngit.inverse.ca/inverse/fingerbank-collector/common.(*FingerbankCollector).AddDestinationHost\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/common/collector.go:842\ngit.inverse.ca/inverse/fingerbank-collector/handlers/dns.(*DNSHandler).Handle\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/handlers/dns/dns.go:59\ngit.inverse.ca/inverse/fingerbank-collector/common.(*FingerbankCollector).HandleGoPacket.func1\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/common/collector.go:763\ngit.inverse.ca/inverse/fingerbank-collector/common.(*FingerbankCollector).HandleGoPacket\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/common/collector.go:764\nmain.captureAndProcess.func1.2\n\t/tmp/tmp.IxmOkuM4ri/src/git.inverse.ca/inverse/fingerbank-collector/capture.go:329\nruntime.goexit\n\t/tmp/tmp.iThav0lgtm/go/src/runtime/asm_amd64.s:1357\n)"
pid=2393
Jan 21 08:00:39 rpspacketfence
/usr/local/fingerbank/collector/fingerbank-collector[2393]:
t=2020-01-21T08:00:39-0500 lvl=eror msg="goroutine 2560540
[running]:\nruntime/debug.Stack(0xc00021e9e0, 0xc0100c9800,
0x74c)\n\t/tmp/tmp.iThav0lgtm/go/src/runtime/debug/stack.go:24 +0x9d\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*FingerbankCollector).HandleGoPacket.func1.1(0xcc04d0,
0xc021001e08)\n\t/tmp/tmp.IxmOkuM4ri/src/
git.inverse.ca/inverse/fingerbank-collector/common/collector.go:758
+0x15d\npanic(0x9df580,
0xc01c6e4a80)\n\t/tmp/tmp.iThav0lgtm/go/src/runtime/panic.go:679 +0x1b2\
ngit.inverse.ca/inverse/fingerbank-collector/timedlock.(*RWLock).handleTimeout(0xc008591300,
0xf962, 0xb0a2b5, 0x35)\n\t/tmp/tmp.IxmOkuM4ri/src/
git.inverse.ca/inverse/fingerbank-collector/timedlock/rw_lock.go:153 +0x1ff\
ngit.inverse.ca/inverse/fingerbank-collector/timedlock.(*RWLock).Lock(0xc008591300,
0x0)\n\t/tmp/tmp.IxmOkuM4ri/src/
git.inverse.ca/inverse/fingerbank-collector/timedlock/rw_lock.go:95 +0x370\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*EndpointData).Copy(0xc00155fb80,
0x0)\n\t/tmp/tmp.IxmOkuM4ri/src/
git.inverse.ca/inverse/fingerbank-collector/common/endpoint_data.go:161
+0x4f\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*EndpointData).Update(0xc00155fb80,
0xc0210017b8)\n\t/tmp/tmp.IxmOkuM4ri/src/
git.inverse.ca/inverse/fingerbank-collector/common/endpoint_data.go:187
+0x2f\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*EndpointData).AddDestinationHost(0xc00155fb80,
0xc02a8f84a0, 0x19, 0x0)\n\t/tmp/tmp.IxmOkuM4ri/src/
git.inverse.ca/inverse/fingerbank-collector/common/endpoint_data.go:251
+0xf0\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*FingerbankCollector).AddDestinationHost(0xcc04d0,
0xc00155fb80, 0xc02a8f84a0, 0x19, 0x0)\n\t/tmp/tmp.IxmOkuM4ri/src/
git.inverse.ca/inverse/fingerbank-collector/common/collector.go:842 +0x4d\
ngit.inverse.ca/inverse/fingerbank-collector/handlers/dns.(*DNSHandler).Handle(0xc0134c28e0,
0xc0119615e6, 0x6, 0x61, 0xc070731bd0, 0xe, 0xc0119615e0, 0x6, 0x67,
0xc070731be0, ...)\n\t/tmp/tmp.IxmOkuM4ri/src/
git.inverse.ca/inverse/fingerbank-collector/handlers/dns/dns.go:59 +0x586\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*FingerbankCollector).HandleGoPacket.func1(0xcc04d0,
0xc010190608, 0xc0119615e6, 0x6, 0x61, 0xc070731bd0, 0xe, 0xc0119615e0,
0x6, 0x67, ...)\n\t/tmp/tmp.IxmOkuM4ri/src/
git.inverse.ca/inverse/fingerbank-collector/common/collector.go:763 +0x11e\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*FingerbankCollector).HandleGoPacket(0xcc04d0,
0xc0139d5640, 0xbdc900, 0xc06eb18840, 0x0,
0x462486)\n\t/tmp/tmp.IxmOkuM4ri/src/

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Nicolas Quiniou-Briand via PacketFence-users]

Hello,

Julien has fixed a bug that generate too many API requests with 
fingerbank-collector in fingerbank-collector 1.2.3. You can upgrade your 
 package.

--
Nicolas Quiniou-Briand
n...@inverse.ca  ::  +1.514.447.4918 *140  ::  https://inverse.ca
Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence 
(https://packetfence.org) and Fingerbank (http://fingerbank.org)



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Nicolas Quiniou-Briand via PacketFence-users]

Hello,

We are checking if it possible to disable feature that increase API 
requests. We will keep you informed.

--
Nicolas Quiniou-Briand
n...@inverse.ca  ::  +1.514.447.4918 *140  ::  https://inverse.ca
Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence 
(https://packetfence.org) and Fingerbank (http://fingerbank.org)



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Serhiy Morhun via PacketFence-users]

I can confirm as well. Fingerbank-collector upgrade resolved issue with
crashes but no help with hitting hourly API limits.
So my questions are:

1. Is there any way to reduce Upstream API calls? I thought only new
unrecognized devices on the network should cause an API call to the cloud.
Also, I thought a local copy of "fingerbank_Upstream.db" would
significantly drop the number of calls but it does not seem to be the case.

- would changing "Query cache time in the collector" (currently 1440),
"Database persistence interval" (currently 600) or the duration of DHCP
lease (currently 30) values help? And if it helps what are the recommended
values?

2. If Packetfence software is now generating many more API calls shouldn't
hourly API limits be increased?

Once the limit is hit and upstream is not reachable anymore packetfence.log
fills up with these
















*Jan 16 07:53:29 rpspacketfence pfqueue: pfqueue(79325) WARN: [mac:unknown]
Unable to perform a Fingerbank lookup for device with MAC address
'[REMOVED]' (pf::fingerbank::process)Jan 16 07:53:29 rpspacketfence
pfqueue: pfqueue(79325) WARN: [mac:unknown] Use of uninitialized value
$class in concatenation (.) or string at /usr/local/pf/lib/pf/fingerbank.pm
 line 295. (pf::fingerbank::_parse_parents)Jan 16
07:53:29 rpspacketfence pfqueue: Use of uninitialized value $class in
concatenation (.) or string at /usr/local/pf/lib/pf/fingerbank.pm
 line 295.Jan 16 07:53:29 rpspacketfence pfqueue:
pfqueue(79325) WARN: [mac:unknown] Use of uninitialized value
$top_level_parent in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm  line
342. (pf::fingerbank::find_device_class)Jan 16 07:53:29 rpspacketfence
pfqueue: Use of uninitialized value $top_level_parent in concatenation (.)
or string at /usr/local/pf/lib/pf/fingerbank.pm  line
342.Jan 16 07:53:29 rpspacketfence pfqueue: Use of uninitialized value
$device_name in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm  line 342.Jan 16
07:53:29 rpspacketfence pfqueue: pfqueue(79325) WARN: [mac:unknown] Use of
uninitialized value $device_name in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm  line
342. (pf::fingerbank::find_device_class)Jan 16 07:53:29 rpspacketfence
pfqueue: pfqueue(79325) WARN: [mac:unknown] Use of uninitialized value
$device_name in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm  line
328. (pf::fingerbank::__ANON__)Jan 16 07:53:29 rpspacketfence pfqueue: Use
of uninitialized value $device_name in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm  line 328.Jan 16
07:53:29 rpspacketfence pfqueue: Use of uninitialized value $device_name in
concatenation (.) or string at /usr/local/pf/lib/pf/fingerbank.pm
 line 328.Jan 16 07:53:29 rpspacketfence pfqueue:
pfqueue(79325) WARN: [mac:unknown] Use of uninitialized value $device_name
in concatenation (.) or string at /usr/local/pf/lib/pf/fingerbank.pm
 line 328. (pf::fingerbank::__ANON__)*






On Thu, Jan 16, 2020 at 6:58 AM Nicolas Quiniou-Briand via
PacketFence-users  wrote:

> Hello,
>
> Thanks for your feedback Hubert.
>
> My coworker Julien told me that since PF 9.2.0, we use
> fingerbank-collector 1.2.0 [1] and this one track more data than
> previously. That could cause more requests on API
>
> Anyway, I will check if I see some unusual behavior
>
> [1]
>
> https://github.com/inverse-inc/packetfence/commit/a1a781bffa2b0a977cc27697505b374586e75f45#diff-c153437373e6e8e23adc599d5c49346f
> --
> Nicolas Quiniou-Briand
> n...@inverse.ca  ::  +1.514.447.4918 *140  ::  https://inverse.ca
> Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence
> (https://packetfence.org) and Fingerbank (http://fingerbank.org)
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>

-- 



*---***


*THE INFORMATION CONTAINED IN THIS MESSAGE (E-MAIL AND ANY ATTACHMENTS) IS 
INTENDED ONLY FOR THE INDIVIDUAL AND CONFIDENTIAL USE OF THE DESIGNATED 
RECIPIENT(S).*

If any reader of this message is not an intended recipient 
or any agent responsible for delivering it to an intended recipient, you 
are hereby notified that you have received this document in error, and that 
any review, dissemination, distribution, copying or other use of this 
message is prohibited.  If you have received this message in error, please 
notify us immediately by reply e-mail message or by telephone and delete 
the original message from your e-mail system and/or computer database.  
Thank you.

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Nicolas Quiniou-Briand via PacketFence-users]

Hello,

Thanks for your feedback Hubert.

My coworker Julien told me that since PF 9.2.0, we use 
fingerbank-collector 1.2.0 [1] and this one track more data than 
previously. That could cause more requests on API


Anyway, I will check if I see some unusual behavior

[1] 
https://github.com/inverse-inc/packetfence/commit/a1a781bffa2b0a977cc27697505b374586e75f45#diff-c153437373e6e8e23adc599d5c49346f

--
Nicolas Quiniou-Briand
n...@inverse.ca  ::  +1.514.447.4918 *140  ::  https://inverse.ca
Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence 
(https://packetfence.org) and Fingerbank (http://fingerbank.org)



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Hubert Kupper via PacketFence-users]

Hello Nicolas,

fingerbank-collector-1.2.2-1.el7.x86_64 is installed but the mails even 
arrive.


Regards,
Hubert

Am 14.01.20 um 14:11 schrieb Nicolas Quiniou-Briand via PacketFence-users:

Hello,

Could you try to upgrade fingerbank-collector package to 
fingerbank-collector-1.2.2-1.el7.x86_64, restart fingerbank services 
and check if it better ?


Thanks.





smime.p7s
Description: S/MIME Cryptographic Signature
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Nicolas Quiniou-Briand via PacketFence-users]

Hello,

Could you try to upgrade fingerbank-collector package to 
fingerbank-collector-1.2.2-1.el7.x86_64, restart fingerbank services and 
check if it better ?


Thanks.
--
Nicolas Quiniou-Briand
n...@inverse.ca  ::  +1.514.447.4918 *140  ::  https://inverse.ca
Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence 
(https://packetfence.org) and Fingerbank (http://fingerbank.org)



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Serhiy Morhun via PacketFence-users]

I got the same issue and the workaround with removing API key and adding it
back did not work.
I get 300 limit reached within 1-2 minutes each hour.

I get  a lot of errors in like this in CentOS messages lg:

Jan  9 07:55:22 rpspacketfence systemd:
packetfence-fingerbank-collector.service: main process exited, code=exited,
status=42/n/a
Jan  9 07:55:22 rpspacketfence systemd: Unit
packetfence-fingerbank-collector.service entered failed state.
Jan  9 07:55:22 rpspacketfence systemd:
packetfence-fingerbank-collector.service failed.
Jan  9 07:55:22 rpspacketfence systemd:
packetfence-fingerbank-collector.service holdoff time over, scheduling
restart.
Jan  9 07:55:22 rpspacketfence systemd: Stopped PacketFence Fingerbank
Collector.
Jan  9 07:55:22 rpspacketfence systemd: Starting PacketFence Fingerbank
Collector...
Jan  9 07:55:26 rpspacketfence pfcmd: service|command
Jan  9 07:55:27 rpspacketfence pfcmd: Starting with the following
environment:


A lot of the following warnings and errors in packetfence.log

Jan  9 07:55:03 rpspacketfence pfqueue: Use of uninitialized value
$device_name in concatenation (.) or string at /usr/local/pf/lib/pf/
fingerbank.pm line 328.
Jan  9 07:55:03 rpspacketfence pfqueue: Use of uninitialized value
$device_name in concatenation (.) or string at /usr/local/pf/lib/pf/
fingerbank.pm line 340.
Jan  9 07:55:03 rpspacketfence pfqueue: pfqueue(64802) WARN: [mac:unknown]
Use of uninitialized value $device_name in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm line 328.
 (pf::fingerbank::__ANON__)
Jan  9 07:55:03 rpspacketfence pfqueue: Use of uninitialized value
$top_level_parent in concatenation (.) or string at /usr/local/pf/lib/pf/
fingerbank.pm line 340.
Jan  9 07:55:03 rpspacketfence pfqueue: pfqueue(64802) WARN: [mac:unknown]
Use of uninitialized value $device_name in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm line 328.
 (pf::fingerbank::__ANON__)
Jan  9 07:55:03 rpspacketfence pfqueue: pfqueue(64802) WARN: [mac:unknown]
Use of uninitialized value $device_name in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm line 328.
 (pf::fingerbank::__ANON__)
Jan  9 07:55:03 rpspacketfence pfqueue: pfqueue(64802) WARN: [mac:unknown]
Use of uninitialized value $device_name in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm line 328.
 (pf::fingerbank::__ANON__)
Jan  9 07:55:03 rpspacketfence pfqueue: pfqueue(64802) WARN: [mac:unknown]
Use of uninitialized value $device_name in concatenation (.) or string at
/usr/local/pf/lib/pf/fingerbank.pm line 340.
 (pf::fingerbank::__ANON__)
Jan  9 07:55:03 rpspacketfence pfqueue: pfqueue(64802) WARN: [mac:unknown]
Use of uninitialized value $top_level_parent in concatenation (.) or string
at /usr/local/pf/lib/pf/fingerbank.pm line 340.
 (pf::fingerbank::__ANON__)
Jan  9 07:55:03 rpspacketfence pfqueue: pfqueue(64802) ERROR: [mac:unknown]
Issue figuring out device class. (pf::fingerbank::process)

 And the following errors in fingerbank.log
Jan  9 07:55:20 rpspacketfence fingerbank: pfqueue(64533) WARN:
[mac:unknown] An error occured while interrogating upstream Fingerbank
project: 500 Internal Server Error (fingerbank::Source::Collector::match)
Jan  9 07:55:20 rpspacketfence
/usr/local/fingerbank/collector/fingerbank-collector[62152]:
t=2020-01-09T07:55:20-0500 lvl=eror
msg="=" pid=62152
Jan  9 07:55:20 rpspacketfence
/usr/local/fingerbank/collector/fingerbank-collector[62152]:
t=2020-01-09T07:55:20-0500 lvl=eror msg="Recovered panic for handler DNS
Handler (runtime error: invalid memory address or nil pointer dereference)"
pid=62152
Jan  9 07:55:20 rpspacketfence
/usr/local/fingerbank/collector/fingerbank-collector[62152]:
t=2020-01-09T07:55:20-0500 lvl=eror msg="goroutine 1290479
[running]:\nruntime/debug.Stack(0xc000189920, 0xc0133eab60,
0x6a)\n\t/tmp/tmp.6JyESyYhLs/go/src/runtime/debug/stack.go:24 +0x9d\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*FingerbankCollector).HandleGoPacket.func1.1(0xc0002a2000,
0xc01abebe08)\n\t/tmp/tmp.nWM4owdKsD/src/
git.inverse.ca/inverse/fingerbank-collector/common/collector.go:763
+0x15d\npanic(0xa182c0,
0x120e020)\n\t/tmp/tmp.6JyESyYhLs/go/src/runtime/panic.go:679 +0x1b2\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*EndpointData).AddDestinationHost(0xc0053bb760,
0xc07c4913b0, 0x10, 0x0)\n\t/tmp/tmp.nWM4owdKsD/src/
git.inverse.ca/inverse/fingerbank-collector/common/endpoint_data.go:262
+0x116\
ngit.inverse.ca/inverse/fingerbank-collector/common.(*FingerbankCollector).AddDestinationHost(0xc0002a2000,
0xc0053bb760, 0xc07c4913b0, 0x10, 0x0)\n\t/tmp/tmp.nWM4owdKsD/src/
git.inverse.ca/inverse/fingerbank-collector/common/collector.go:847 +0x4d\
ngit.inverse.ca/inverse/fingerbank-collector/handlers/dns.(*DNSHandler).Handle(0xc00b3164a0,
0xc07503e916, 0x6, 0x46, 0xc07c4912f0, 0xd, 0xc07503e910, 0x6, 0x4c,
0xc07c491300, ...)\n\t/tmp/tmp.nWM4owdKsD/src/

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Nicolas Quiniou-Briand via PacketFence-users]

Hello everyone,

Did you notice some specific error messages in logs ?
--
Nicolas Quiniou-Briand
n...@inverse.ca  ::  +1.514.447.4918 *140  ::  https://inverse.ca
Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence 
(https://packetfence.org) and Fingerbank (http://fingerbank.org)



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: Fingerbank and softnet_stat issues with version 9.2

[Hubert Kupper via PacketFence-users]

Hello Giacinto,

I did your trick but for us it doesn't work. Shortly after saving the 
API KEY again, the email with 300 lookups per hour arrived.


Best regards,
Hubert

Am 08.01.20 um 11:48 schrieb Giacinto Caretto via PacketFence-users:


same problem on Fingerbank after upgrade from 9.1 to 9.2 ...

constantly receive the Fingerbank alert email that we have exceeded 
our 300 lookups per hour ...


I don't know if a pf or fingerbank bug ..

I have tried this and it is working so far :

1. from FingerBank - General settings Menu  :  cancel the API KEY 
 (copy the string somewhere) and save


2. wait some time, take the next hour .. .

3. reinsert the API key and save

problem missing

classic solution .. I don't know why, but it worked for me

Ciao

Giacinto

*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/
*/ Giacinto Caretto */
*/ DTE-ICT-RETE  */
*/ giacinto.care...@enea.it  */
*/ ENEATEL 91 206 */
*/  Uff. 0831201 206-234  */
*/    FAX. 0831201 207    */
*/ Mob. +393283904483 */
*/   ENEA - CR Brindisi   */
*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/



*Da:*Truax, Peter via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]

*Inviato:* martedì 7 gennaio 2020 17:18
*A:* Packet Fence Users (packetfence-users@lists.sourceforge.net)
*Cc:* Truax, Peter
*Oggetto:* [PacketFence-users] Fingerbank and softnet_stat issues with 
version 9.2


Hello everyone,

We upgraded from 9.0.1 to 9.2 over the Christmas holiday and are 
experiencing a strange issue that was not present before. I am 
wondering if we have something misconfigured or it could be a bug?


The symptoms are that we constantly receive the Fingerbank alert email 
that we have exceeded our 300 lookups per hour. We have received this 
email every hour since we upgraded. Also, our softnet_stat events have 
gone up to around 500 per 10 minutes. This is affecting the 
performance of the server. I have looked at the softnet_stat issue in 
the past with version 7.4, and have mitigated it by increased the 
net.core.netdev_budget to 4800. After the upgrade to version 9.2, we 
immediately started experiencing the Fingerbank emails as well as the 
increase in softnet_stat.


Anyone know what may have changed with 9.2 to cause this? Our 
apache_filters.conf file is all commented. But I am not sure what, if 
anything we need to filter for the captive portal. We hadn’t needed to 
in the past, and the logs don’t show anything out of the ordinary.


Regards,

*Peter Truax*

*Network Administrator*

(360) 688-2240

Saint Martin’s University

5000 Abbey Way E

Lacey, WA 98503

125thCelebration_EmailSigFinal



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users




smime.p7s
Description: S/MIME Cryptographic Signature
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users