Bug #4276: Layer 7 not working / ipfw-classifyd high load - pfSense - pfSense bugtracker

Actions

Copy link

Bug #4276

closed

Layer 7 not working / ipfw-classifyd high load

Added by Bartłomiej Bujak about 9 years ago. Updated over 8 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Chris Buechler

Category:

Layer 7

Target version:

Start date:

01/24/2015

Due date:

% Done:

Estimated time:

Plus Target Version:

Release Notes:

Affected Version:

2.2.x

Affected Architecture:

All

Description

After upgrade pfsense 2.1.5 to 2.2 i have problem with ipfw-classifyd

  PID USERNAME  THR PRI NICE   SIZE    RES STATE    TIME    WCPU COMMAND
76425 root        5  20    0 23584K  7760K nanslp   1:45  63.87% ipfw-classifyd

I remove Traffic Shaper Layer7 rule and now all it's ok . I had only 1 rule.

76425 root        5  20    0 23584K  7788K nanslp   3:21   0.00% ipfw-classifyd

Actions

Copy link

Updated by Bartłomiej Bujak about 9 years ago

In logs:

dnsmasq[89256]: failed to send packet: No buffer space available

After remove layer7 rule, DNS ( on client) start work correctly

Actions

Copy link

Updated by Chris Buechler about 9 years ago

Project changed from pfSense Packages to pfSense
Category set to Layer 7

Actions

Copy link

Updated by winmasta winmasta about 9 years ago

in logs:

ipfw-classifyd: packet dropped: output queue full

Actions

Copy link

Updated by Jim Pingle about 9 years ago

Status changed from New to Confirmed
Target version set to 2.2.2

Pretty simple to reproduce

Add a layer 7 container, for example, to block bittorrent
Apply the layer 7 container on a pass rule on LAN to pass all traffic
Observe that no traffic passes and ipfw-classifyd is consuming 100% CPU

Actions

Copy link

Updated by Jim Pingle about 9 years ago

Subject changed from ipfw-classifyd high load after upgrade do 2.2 to Layer 7 not working / ipfw-classifyd high load
Affected Architecture All added
Affected Architecture deleted ()