https://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162014-10-21T07:00:52ZpfSense bugtrackerpfSense - Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handleshttps://redmine.pfsense.org/issues/3951?journal_id=152902014-10-21T07:00:52ZPetr Klusklus.petr@gmail.com
<ul></ul><p>My case: pfSense 2.1.5 running on i386 embedded version. Clean install, only modification apart from UI is password file for OpenVPN client connection.</p>
<p>I saw the open files grow to an extend that DNS resolver and DHCP server stopped working. I've tracked down the growth to gateway alarm, which caused reload of the rules.</p>
<p>I had a dodgy monitor IP with short alarm period, which meant that the connection alarm was triggered on/off every 10-15m. This means that every 10-15m, I would see the number of open files grow. Even my system with very few aliases locked up in a week's time.</p>
<p>I have worked-around the issue by disabling the gateway alarms on the VPN connection (I was not using them to trigger anything anyway) and now my system seems more stable!</p> pfSense - Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handleshttps://redmine.pfsense.org/issues/3951?journal_id=152982014-10-21T15:13:01ZChris Buechlercbuechler@gmail.com
<ul></ul><p>could anyone attach the full output of fstat from an affected system? Spot checked some using filterdns and they seem sane.</p> pfSense - Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handleshttps://redmine.pfsense.org/issues/3951?journal_id=152992014-10-21T15:18:29ZPetr Klusklus.petr@gmail.com
<ul><li><strong>File</strong> <a href="/attachments/1056">fstat_out.txt</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/1056/fstat_out.txt">fstat_out.txt</a> added</li></ul><p>Here it is!</p> pfSense - Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handleshttps://redmine.pfsense.org/issues/3951?journal_id=153992014-10-29T15:53:28ZChris Buechlercbuechler@gmail.com
<ul><li><strong>Assignee</strong> set to <i>Chris Buechler</i></li><li><strong>Target version</strong> set to <i>2.2</i></li></ul> pfSense - Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handleshttps://redmine.pfsense.org/issues/3951?journal_id=154512014-11-01T12:05:05ZErmal Luçieri@pfsense.org
<ul></ul><p>I think i found the cause.<br />Please test with new snapshots.</p> pfSense - Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handleshttps://redmine.pfsense.org/issues/3951?journal_id=154522014-11-01T12:23:03ZErmal Luçieri@pfsense.org
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Feedback</i></li></ul> pfSense - Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handleshttps://redmine.pfsense.org/issues/3951?journal_id=154702014-11-02T05:46:51ZPhillip Davisphil@jankaritech.com
<ul><li><strong>File</strong> <a href="/attachments/1063">filterdns-fstat-22B-2014-11-02.txt</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/1063/filterdns-fstat-22B-2014-11-02.txt">filterdns-fstat-22B-2014-11-02.txt</a> added</li><li><strong>File</strong> <a href="/attachments/1064">filterdns-fstat-215-2014-11-02.txt</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/1064/filterdns-fstat-215-2014-11-02.txt">filterdns-fstat-215-2014-11-02.txt</a> added</li></ul><p>My main 2.1.5 production system is the big offender with this - it has over 4000 in filterdns fstat. But I can't upgrade that to test. A sample of its fstat output is in filterdns-fstat-215-2014-11-02.txt<br />I added an alias with 15 FQDNs in (one I regularly use) to my test 2.2 system. The filterdns fstat output grows every 5minutes or so, i.r. every time filterdns wakes up and does its checks - sample is in attached filterdns-fstat-22B-2014-11-02.txt<br />Now I am upgrading the 2.2 test system to the latest snapshot. Will report back in a few hours how it goes.</p> pfSense - Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handleshttps://redmine.pfsense.org/issues/3951?journal_id=154712014-11-02T08:58:58ZPhillip Davisphil@jankaritech.com
<ul><li><strong>File</strong> <a href="/attachments/1065">filterdns-fstat-22B-2014-11-02a.txt</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/1065/filterdns-fstat-22B-2014-11-02a.txt">filterdns-fstat-22B-2014-11-02a.txt</a> added</li></ul><p>Updated to:<br />2.2-BETA (amd64)<br />built on Sat Nov 01 21:36:28 CDT 2014<br />FreeBSD 10.1-RC4</p>
<p>Now filterdns has just 8 things open after starting up the first time, and after 45 minutes uptime there are still only 8 things open.<br />For the record, some fstat output is attached - looks good.</p>
<p>The filterdns issue seems to be fixed.</p>
<p>@Petr - are you able to test a 2.2 system with ipfw-classifyd and see if that exhibits similar issues to your 2.1.5 system?<br />If it does, then perhaps a separate issue should be raised for that, and this one can be closed - as there are probably 2 completely separate issues here.</p>
<p>@Eraml and <a class="user active" href="https://redmine.pfsense.org/users/705">. .</a> - thanks for looking at this in a timely manner - it is good to cleanup any issues that leak system resources.</p> pfSense - Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handleshttps://redmine.pfsense.org/issues/3951?journal_id=154862014-11-03T15:31:30ZErmal Luçieri@pfsense.org
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Resolved</i></li></ul>