Re: [pfSense Support] pfSense 2.0, upgrade to this morning's snap problem

2011-01-24 Thread David Burgess
On Mon, Jan 24, 2011 at 11:42 AM, Dimitri Rodis
 wrote:
> After an upgrade to this morning’s snap, I received the following after the
> upgrade/reboot (it’s what’s on my PuTTY atm):

This looks a lot like what's being discussed here, although I don't
see the em driver implicated in your output:

http://forum.pfsense.org/index.php/topic,31721.0.html

db

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Traffic Graph accurate--but not the host list

2011-01-24 Thread David Burgess
On Mon, Jan 24, 2011 at 11:38 AM, Dimitri Rodis
 wrote:
> pfSense 2.0, most recent builds
>
>
>
> When I go to status/traffic graph, the graph is correct but the list of
> hosts is not. I don’t know if there’s something I’m not doing, but here’s
> what I did to test it:
>
> Put a windows machine (my laptop) on the LAN interface, and plug the WAN
> into my internal network. I connected to my file server from the laptop, and
> copied 10 GB of data from the file server to the laptop. When I did, the
> graph showed 98Mb of traffic fairly consistently, but the host list never
> showed more than a few kb of traffic for my laptop, and on the WAN side it
> never showed the file server’s ip address at all. It almost looks like the
> host list is only looking at traffic directed to pfSense itself as opposed
> to through that particular interface.

It's not clear to me from your email if you looked at the graph for
both WAN and LAN interface. In fact, when I look at the WAN graph I
only ever see public IP addresses that are local to pfsense. In other
words, I have NATed hosts and routed hosts internally, and while I see
the routed hosts show up on the WAN graph, I do not see NATed hosts,
but I do see their corresponding WAN address.

When I look at the LAN graph I see addresses of individual hosts on the LAN.

What I do find strange is that I also sometimes see the network and
broadcast address of my internal routed network show up on the WAN
graph even though that network is routed through a private gateway,
and not directly connected to pfsense.

So I have this:

pfsense WAN: x.x.224.55
pfsense LAN: 192.168.172.254/24
static route: x.x.225.176/30 gw 172.21.172.101

So the only host beyond the 192.168.172.0 network is x.x.225.178, and
yet on the LAN graph I occasionally see x.x.225.y, where y = 176-179,
although normally it just shows y = 178, which is expected.

I also occasionally see addresses show up there and then freeze, where
they don't disappear and the rate doesn't change, although that host
may be long silent.

db

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Traffic Graph accurate--but not the host list

2011-01-24 Thread Tim Nelson





pfSense 2.0, most recent builds 



When I go to status/traffic graph, the graph is correct but the list of hosts 
is not. I don’t know if there’s something I’m not doing, but here’s what I did 
to test it: 

Put a windows machine (my laptop) on the LAN interface, and plug the WAN into 
my internal network. I connected to my file server from the laptop, and copied 
10 GB of data from the file server to the laptop. When I did, the graph showed 
98Mb of traffic fairly consistently, but the host list never showed more than a 
few kb of traffic for my laptop, and on the WAN side it never showed the file 
server’s ip address at all. It almost looks like the host list is only looking 
at traffic directed to pfSense itself as opposed to through that particular 
interface. 



Anyone else confirm? 




I've noticed this same behavior as well, although it is on a 1.2.2 box with the 
'rate' package installed. 

--Tim

[pfSense Support] pfSense 2.0, upgrade to this morning's snap problem

2011-01-24 Thread Dimitri Rodis
After an upgrade to this morning's snap, I received the following after the 
upgrade/reboot (it's what's on my PuTTY atm):

Syncing OpenVPN settings...done.
Starting syslog...done.
Configuring firewall..done.
Starting PFLOG...done.
Setting up gateway monitors...done.
Synchronizing user settings...done.
Starting webConfigurator...done.
Configuring CRON...done.
Starting OpenNTP time client...done.
Starting DHCP service...done.
Starting DNS forwarder...done.
Configuring firewall..done.
kernel trap 12 with interrupts disabled


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x8
fault code  = supervisor read, page not present
instruction pointer = 0x20:0xc094d130
stack pointer   = 0x28:0xc27d1b84
frame pointer   = 0x28:0xc27d1ba4
code segment= base 0x0, limit 0xf, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags= resume, IOPL = 0
current process = 11 (swi4: clock)
trap number = 12
panic: page fault
cpuid = 0
Uptime: 25s
Cannot dump. Device not defined or unavailable.
Automatic reboot in 15 seconds - press a key on the console to abort
--> Press a key on the console to reboot,
--> or switch off the system now.



[pfSense Support] Traffic Graph accurate--but not the host list

2011-01-24 Thread Dimitri Rodis
pfSense 2.0, most recent builds

When I go to status/traffic graph, the graph is correct but the list of hosts 
is not. I don't know if there's something I'm not doing, but here's what I did 
to test it:
Put a windows machine (my laptop) on the LAN interface, and plug the WAN into 
my internal network. I connected to my file server from the laptop, and copied 
10 GB of data from the file server to the laptop. When I did, the graph showed 
98Mb of traffic fairly consistently, but the host list never showed more than a 
few kb of traffic for my laptop, and on the WAN side it never showed the file 
server's ip address at all. It almost looks like the host list is only looking 
at traffic directed to pfSense itself as opposed to through that particular 
interface.

Anyone else confirm?

Dimitri Rodis
Integrita Systems LLC
http://www.integritasystems.com


Re: [pfSense Support] outgoing gw to be vip

2011-01-24 Thread Shibashish
Awesome... this seems to be working !!

ShiB.
while ( ! ( succeed = try() ) );


On Mon, Jan 24, 2011 at 7:14 PM, Seth Mos  wrote:

> Op 24-1-2011 14:39, Shibashish schreef:
>
>  Hi,
>>
>> I have a mail server running on a vip which is natted to a real-lan ip.
>> I have added the VIP in load-balancer option and added my lan server as
>> the virtual-server-pool. But now my outgoing traffic is taking the ip of
>> firewall as the firewall is its gateway. I want to set the vip as the
>> outgoing ip for all the mail traffic... how do i change/set this?
>>
>
> Have you tried using 1:1 NAT? That should make the traffic use the correct
> VIP.
>
> Regards,
> Seth
>
> -
> To unsubscribe, e-mail: support-unsubscr...@pfsense.com
> For additional commands, e-mail: support-h...@pfsense.com
>
> Commercial support available - https://portal.pfsense.org
>
>


Re: [pfSense Support] outgoing gw to be vip

2011-01-24 Thread Seth Mos

Op 24-1-2011 14:39, Shibashish schreef:

Hi,

I have a mail server running on a vip which is natted to a real-lan ip.
I have added the VIP in load-balancer option and added my lan server as
the virtual-server-pool. But now my outgoing traffic is taking the ip of
firewall as the firewall is its gateway. I want to set the vip as the
outgoing ip for all the mail traffic... how do i change/set this?


Have you tried using 1:1 NAT? That should make the traffic use the 
correct VIP.


Regards,
Seth

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] outgoing gw to be vip

2011-01-24 Thread Shibashish
Hi,

I have a mail server running on a vip which is natted to a real-lan ip. I
have added the VIP in load-balancer option and added my lan server as the
virtual-server-pool. But now my outgoing traffic is taking the ip of
firewall as the firewall is its gateway. I want to set the vip as the
outgoing ip for all the mail traffic... how do i change/set this?

Thanks.

ShiB.
while ( ! ( succeed = try() ) );