Project

General

Profile

Bug #6364

PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 32 bytes) in /usr/local/www/status_carp.php on line 261

Added by Zeev Zalessky about 3 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority:
Normal
Category:
CARP
Target version:
Start date:
05/18/2016
Due date:
% Done:

0%

Estimated time:
Affected Version:
2.3.x
Affected Architecture:

Description

Hello,

i have pretty big carp cluster with:
WAN@1 10.165.128.254 BACKUP
VLAN20@2 10.161.20.210 BACKUP
VLAN20@3 10.161.111.210 BACKUP
VLAN20@4 10.161.124.210 BACKUP
VLAN20@5 10.161.125.210 BACKUP
VLAN20@6 10.161.133.210 BACKUP
VLAN20@7 10.161.141.210 BACKUP
VLAN20@8 10.161.201.210 BACKUP
VLAN20@9 10.161.202.210 BACKUP
VLAN20@10 10.161.203.210 BACKUP
VLAN20@11 10.161.204.210 BACKUP
VLAN20@12 10.161.205.210 BACKUP
VLAN20@13 10.161.206.210 BACKUP
VLAN20@14 10.161.207.210 BACKUP
VLAN20@15 10.161.222.210 BACKUP
VLAN20@16 10.161.223.210 BACKUP
VLAN20@17 10.161.245.210 BACKUP
VLAN60@18 10.161.60.245 BACKUP
VLAN60@19 10.161.61.245 BACKUP
VLAN60@20 10.161.62.245 BACKUP
VLAN60@21 10.161.63.245 BACKUP
VLAN60@22 10.161.64.245 BACKUP
161_134@23 10.161.134.1 BACKUP
161_134@24 10.161.134.33 BACKUP
161_134@25 10.161.134.65 BACKUP
161_134@26 10.161.134.97 BACKUP
161_134@27 10.161.134.129 BACKUP
161_134@28 10.161.134.161 BACKUP
161_134@29 10.161.134.193 BACKUP
161_134@30 10.161.134.225 BACKUP
161_134@31 10.161.134.210 BACKUP
161_135@32 10.161.135.1 BACKUP
161_135@33 10.161.135.65 BACKUP
161_135@34 10.161.135.129 BACKUP
161_135@35 10.161.135.193 BACKUP
165_129@37 10.165.129.210 BACKUP
165_130@38 10.165.130.210 BACKUP
165_140@39 10.165.140.210 BACKUP
165_141@40 10.165.141.210 BACKUP
165_142@41 10.165.142.210 BACKUP
165_143@42 10.165.143.210 BACKUP
165_144@43 10.165.144.210 BACKUP
165_145@44 10.165.145.210 BACKUP
165_146@45 10.165.146.210 BACKUP
165_147@46 10.165.147.210 BACKUP
165_148@47 10.165.148.210 BACKUP
165_149@48 10.165.149.210 BACKUP
165_150@49 10.165.150.210 BACKUP
165_160@50 10.165.160.210 BACKUP
165_164@51 10.165.164.210 BACKUP
165_168@52 10.165.168.210 BACKUP
DMZ@53 10.165.180.210 BACKUP
LAB_INFRA@54 10.165.200.210 BACKUP
165_205@55 10.165.205.210 BACKUP
165_215@56 10.165.215.210 BACKUP
165_216@57 10.165.216.210 BACKUP
165_223@58 10.165.223.210 BACKUP
165_240@59 10.165.240.210 BACKUP
165_241@60 10.165.241.210 BACKUP
165_242@61 10.165.242.210 BACKUP
165_243@62 10.165.243.210 BACKUP
165_244@63 10.165.244.210 BACKUP
165_245@64 10.165.245.210 BACKUP
165_246@65 10.165.246.210 BACKUP
165_247@66 10.165.247.210 BACKUP

currently is disabled on primary node for upgrade from 2.2.4 to 2.3
after upgrade i can't enable it. please help

Associated revisions

Revision b6899307 (diff)
Added by Chris Buechler almost 3 years ago

Set PHP's memory limit to 512M on 64 bit. Ticket #6364

Revision 16bcd358 (diff)
Added by Chris Buechler almost 3 years ago

Set PHP's memory limit to 512M on 64 bit. Ticket #6364

Revision b20c7ef1 (diff)
Added by Chris Buechler almost 3 years ago

Set PHP's memory limit to 512M on 64 bit. Ticket #6364

Revision eef555b9 (diff)
Added by Chris Buechler almost 3 years ago

Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364

Revision e38e1efd (diff)
Added by Chris Buechler almost 3 years ago

Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364

Revision c6060e22 (diff)
Added by Chris Buechler almost 3 years ago

Restore 2.2.x and prior means of obtaining pfsync nodes to avoid exhausting memory on systems with large state tables. Ticket #6364

History

#1 Updated by Zeev Zalessky about 3 years ago

Crash report begins. Anonymous machine information:

amd64
10.3-RELEASE
FreeBSD 10.3-RELEASE #6 05adf0a(RELENG_2_3_0): Mon Apr 11 18:52:07 CDT 2016 root@ce23-amd64-builder:/builder/pfsense-230/tmp/obj/builder/pfsense-230/tmp/FreeBSD-src/sys/pfSense

Crash report details:

PHP Errors:
[18-May-2016 18:22:39 Asia/Jerusalem] PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 83 bytes) in /usr/local/www/status_carp.php on line 261
[18-May-2016 18:22:39 Asia/Jerusalem] PHP Stack trace:
[18-May-2016 18:22:39 Asia/Jerusalem] PHP 1. {main}() /usr/local/www/status_carp.php:0
[18-May-2016 18:22:39 Asia/Jerusalem] PHP 2. pfSense_get_pf_states() /usr/local/www/status_carp.php:261

#2 Updated by Zeev Zalessky about 3 years ago

adding ini_set('memory_limit', '490M'); to the top of status_carp.php file help to display upper part of page but at the foot of page:
pfSync Nodes

Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 86 bytes) in /usr/local/www/status_carp.php on line 261 Call Stack: 0.0011 228832 1. {main}() /usr/local/www/status_carp.php:0 0.2140 2019856 2. pfSense_get_pf_states() /usr/local/www/status_carp.php:261 PHP ERROR: Type: 1, File: /usr/local/www/status_carp.php, Line: 261, Message: Allowed memory size of 268435456 bytes exhausted (tried to allocate 86 bytes)

#3 Updated by Zeev Zalessky about 3 years ago

2.3.1 has same problem

#4 Updated by Sandeep K V about 3 years ago

Though this is my first bug fix. I think I found the solution to the bug. Php is crashing due to lack of memory. So fix is setting the maximum memory limit: define( 'WP_MAX_MEMORY_LIMIT' , '512M' );

#5 Updated by Zeev Zalessky about 3 years ago

Memory already configured for 512M but in some place still configured ini_set('memory_limit', '256M'); your fix is for wordpress and not for pfsense

#6 Updated by Jim Thompson almost 3 years ago

  • Priority changed from Very High to Normal

#7 Updated by Zeev Zalessky almost 3 years ago

currently i can't enable CARP on my cluster and if active node will failed for some reason I'll be without network at all. if you have any idea how to enable it without carp page will be good. if not please return priority back. there is a lot of pages that crash with same error on big setups with tens of VLANs/Interfaces

#8 Updated by Chris Buechler almost 3 years ago

  • Affected Architecture deleted (amd64)

It has nothing to do with the number of VLANs or interfaces, if the state table is really large, it runs out of memory there. That affects two pages, status_carp.php and diag_dumpstates.php. The latter has always been that way in the circumstance, the former new to 2.3 because it displays the pfsync nodes in a different manner.

I increased the limit to 512 MB for 64 bit. 32 bit left as-is since 32 bit systems often have less total memory than that.

#9 Updated by Zeev Zalessky almost 3 years ago

This is incorrect. i run cluster of 64bit. each server 2x X5660 (6core) CPUs and 32GB ram and i have the problem.

#10 Updated by Zeev Zalessky almost 3 years ago

result of uname -a
FreeBSD TLWV-FW1.EISLAB-IL.INTRA 10.3-RELEASE-p3 FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT 2016 root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense amd64

result of phpinfo()
php -r 'print_r(phpinfo());'
phpinfo()
PHP Version => 5.6.21

System => FreeBSD TLWV-FW1.EISLAB-IL.INTRA 10.3-RELEASE-p3 FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT 2016 root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense amd64
Build Date => May 16 2016 19:33:11
Configure Command => './configure' '--with-layout=GNU' '--localstatedir=/var' '--with-config-file-scan-dir=/usr/local/etc/php' '--disable-all' '--enable-libxml' '--enable-mysqlnd' '--with-libxml-dir=/usr/local' '--with-pcre-regex=/usr/local' '--with-zlib-dir=/usr' '--program-prefix=' '--enable-fpm' '--with-fpm-user=www' '--with-fpm-group=www' '--with-regex=php' '--with-zend-vm=CALL' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=amd64-portbld-freebsd10.3' 'build_alias=amd64-portbld-freebsd10.3' 'CC=cc' 'CFLAGS=-O2 '-pipe' '-fstack-protector' '-fno-strict-aliasing'' 'LDFLAGS= '-fstack-protector'' 'LIBS=-lpthread' 'CPPFLAGS=' 'CPP=cpp' 'CXX=c++' 'CXXFLAGS=-O2 '-pipe' '-fstack-protector' '-fno-strict-aliasing'
Server API => Command Line Interface
Virtual Directory Support => disabled
Configuration File (php.ini) Path => /usr/local/etc
Loaded Configuration File => /usr/local/etc/php.ini
Scan this dir for additional .ini files => /usr/local/etc/php
Additional .ini files parsed => /usr/local/etc/php/extensions.ini

PHP API => 20131106
PHP Extension => 20131226
Zend Extension => 220131226
Zend Extension Build => API220131226,NTS
PHP Extension Build => API20131226,NTS
Debug Build => no
Thread Safety => disabled
Zend Signal Handling => disabled
Zend Memory Manager => enabled
Zend Multibyte Support => provided by mbstring
IPv6 Support => enabled
DTrace Support => disabled

Registered PHP Streams => compress.bzip2, php, file, glob, data, http, ftp, https, ftps, ssh2.shell, ssh2.exec, ssh2.tunnel, ssh2.scp, ssh2.sftp, compress.zlib
Registered Stream Socket Transports => tcp, udp, unix, udg, ssl, sslv3, sslv2, tls, tlsv1.0, tlsv1.1, tlsv1.2
Registered Stream Filters => bzip2.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, dechunk, mcrypt.*, mdecrypt.*, zlib.*

This program makes use of the Zend Scripting Language Engine:
Zend Engine v2.6.0, Copyright (c) 1998-2016 Zend Technologies
with Zend OPcache v7.0.6-dev, Copyright (c) 1999-2016, by Zend Technologies
with Xdebug v2.2.5, Copyright (c) 2002-2014, by Derick Rethans
with Suhosin v0.9.38, Copyright (c) 2007-2015, by SektionEins GmbH


Configuration

bcmath

BCMath support => enabled

Directive => Local Value => Master Value
bcmath.scale => 0 => 0

bz2

BZip2 Support => Enabled
Stream Wrapper support => compress.bzip2://
Stream Filter support => bzip2.decompress, bzip2.compress
BZip2 Version => 1.0.6, 6-Sept-2010

Core

PHP Version => 5.6.21

Directive => Local Value => Master Value
allow_url_fopen => On => On
allow_url_include => Off => Off
always_populate_raw_post_data => 0 => 0
arg_separator.input => & => &
arg_separator.output => & => &
asp_tags => Off => Off
auto_append_file => no value => no value
auto_globals_jit => On => On
auto_prepend_file => no value => no value
browscap => no value => no value
default_charset => UTF-8 => UTF-8
default_mimetype => text/html => text/html
disable_classes => no value => no value
disable_functions => no value => no value
display_errors => STDOUT => STDOUT
display_startup_errors => On => On
doc_root => no value => no value
docref_ext => no value => no value
docref_root => no value => no value
enable_dl => On => On
enable_post_data_reading => On => On
error_append_string => no value => no value
error_log => /tmp/PHP_errors.log => /tmp/PHP_errors.log
error_prepend_string => no value => no value
error_reporting => 5 => 5
exit_on_timeout => Off => Off
expose_php => Off => Off
extension_dir => /usr/local/lib/php/20131226/ => /usr/local/lib/php/20131226/
file_uploads => On => On
highlight.comment => <font style="color: #FF8000">#FF8000</font> => <font style="color: #FF8000">#FF8000</font>
highlight.default => <font style="color: #0000BB">#0000BB</font> => <font style="color: #0000BB">#0000BB</font>
highlight.html => <font style="color: #000000">#000000</font> => <font style="color: #000000">#000000</font>
highlight.keyword => <font style="color: #007700">#007700</font> => <font style="color: #007700">#007700</font>
highlight.string => <font style="color: #DD0000">#DD0000</font> => <font style="color: #DD0000">#DD0000</font>
html_errors => Off => Off
ignore_repeated_errors => Off => Off
ignore_repeated_source => Off => Off
ignore_user_abort => Off => Off
implicit_flush => On => On
include_path => .:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form => .:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form
input_encoding => no value => no value
internal_encoding => no value => no value
log_errors => On => On
log_errors_max_len => 1024 => 1024
mail.add_x_header => Off => Off
mail.force_extra_parameters => no value => no value
mail.log => no value => no value
max_execution_time => 0 => 0
max_file_uploads => 20 => 20
max_input_nesting_level => 64 => 64
max_input_time => -1 => -1
max_input_vars => 5000 => 5000
memory_limit => 128M => 128M
open_basedir => no value => no value
output_buffering => 0 => 0
output_encoding => no value => no value
output_handler => no value => no value
post_max_size => 200M => 200M
precision => 14 => 14
realpath_cache_size => 16K => 16K
realpath_cache_ttl => 120 => 120
register_argc_argv => On => On
report_memleaks => On => On
report_zend_debug => Off => Off
request_order => no value => no value
sendmail_from => no value => no value
sendmail_path => /usr/sbin/sendmail -t -i => /usr/sbin/sendmail -t -i
serialize_precision => 17 => 17
short_open_tag => On => On
SMTP => localhost => localhost
smtp_port => 25 => 25
sql.safe_mode => Off => Off
sys_temp_dir => no value => no value
track_errors => Off => Off
unserialize_callback_func => no value => no value
upload_max_filesize => 200M => 200M
upload_tmp_dir => /tmp => /tmp
user_dir => no value => no value
user_ini.cache_ttl => 300 => 300
user_ini.filename => .user.ini => .user.ini
variables_order => GPCS => GPCS
xmlrpc_error_number => 0 => 0
xmlrpc_errors => Off => Off
zend.detect_unicode => On => On
zend.enable_gc => On => On
zend.multibyte => Off => Off
zend.script_encoding => no value => no value

ctype

ctype functions => enabled

curl

cURL support => enabled
cURL Information => 7.48.0
Age => 3
Features
AsynchDNS => Yes
CharConv => No
Debug => No
GSS-Negotiate => No
IDN => No
IPv6 => Yes
krb4 => No
Largefile => Yes
libz => Yes
NTLM => Yes
NTLMWB => Yes
SPNEGO => Yes
SSL => Yes
SSPI => No
TLS-SRP => Yes
Protocols => dict, file, ftp, ftps, gopher, http, https, imap, imaps, pop3, pop3s, rtsp, smb, smbs, smtp, smtps, telnet, tftp
Host => amd64-portbld-freebsd10.3
SSL Version => OpenSSL/1.0.1s
ZLib Version => 1.2.8

date

date/time support => enabled
"Olson" Timezone Database Version => 2016.3
Timezone Database => internal
Default timezone => Asia/Jerusalem

Directive => Local Value => Master Value
date.default_latitude => 31.7667 => 31.7667
date.default_longitude => 35.2333 => 35.2333
date.sunrise_zenith => 90.583333 => 90.583333
date.sunset_zenith => 90.583333 => 90.583333
date.timezone => Asia/Jerusalem => Asia/Jerusalem

dom

DOM/XML => enabled
DOM/XML API Version => 20031129
libxml Version => 2.9.3
HTML Support => enabled
XPath Support => enabled
XPointer Support => enabled
Schema Support => enabled
RelaxNG Support => enabled

ereg

Regex Library => Bundled library enabled

filter

Input Validation and Filtering => enabled
Revision => $Id: 0a967738ca580e8bfdacb06853749743fc79b969 $

Directive => Local Value => Master Value
filter.default => unsafe_raw => unsafe_raw
filter.default_flags => no value => no value

gettext

GetText Support => enabled

hash

hash support => enabled
Hashing Engines => md2 md4 md5 sha1 sha224 sha256 sha384 sha512 ripemd128 ripemd160 ripemd256 ripemd320 whirlpool tiger128,3 tiger160,3 tiger192,3 tiger128,4 tiger160,4 tiger192,4 snefru snefru256 gost gost-crypto adler32 crc32 crc32b fnv132 fnv1a32 fnv164 fnv1a64 joaat haval128,3 haval160,3 haval192,3 haval224,3 haval256,3 haval128,4 haval160,4 haval192,4 haval224,4 haval256,4 haval128,5 haval160,5 haval192,5 haval224,5 haval256,5

json

json support => enabled
json version => 1.2.1

ldap

LDAP Support => enabled
RCS Version => $Id: 5ffc17b96f6abc34bc3607bc1131ea7a79586613 $
Total Links => 0/unlimited
API Version => 3001
Vendor Name => OpenLDAP
Vendor Version => 20444

Directive => Local Value => Master Value
ldap.max_links => Unlimited => Unlimited

libxml

libXML support => active
libXML Compiled Version => 2.9.3
libXML Loaded Version => 20903
libXML streams => enabled

mbstring

Multibyte Support => enabled
Multibyte string engine => libmbfl
HTTP input encoding translation => disabled
libmbfl version => 1.3.2

mbstring extension makes use of "streamable kanji code filter and converter", which is distributed under the GNU Lesser General Public License version 2.1.

Multibyte (japanese) regex support => enabled
Multibyte regex (oniguruma) version => 5.9.6

Directive => Local Value => Master Value
mbstring.detect_order => no value => no value
mbstring.encoding_translation => Off => Off
mbstring.func_overload => 0 => 0
mbstring.http_input => no value => no value
mbstring.http_output => no value => no value
mbstring.http_output_conv_mimetypes => ^(text/|application/xhtml\+xml) => ^(text/|application/xhtml\+xml)
mbstring.internal_encoding => no value => no value
mbstring.language => neutral => neutral
mbstring.strict_detection => Off => Off
mbstring.substitute_character => no value => no value

mcrypt

mcrypt support => enabled
mcrypt_filter support => enabled
Version => 2.5.8
Api No => 20021217
Supported ciphers => cast-128 gost rijndael-128 twofish arcfour cast-256 loki97 rijndael-192 saferplus wake blowfish-compat des rijndael-256 serpent xtea blowfish enigma rc2 tripledes
Supported modes => cbc cfb ctr ecb ncfb nofb ofb stream

Directive => Local Value => Master Value
mcrypt.algorithms_dir => no value => no value
mcrypt.modes_dir => no value => no value

mhash

MHASH support => Enabled
MHASH API Version => Emulated Support

mysqlnd

mysqlnd => enabled
Version => mysqlnd 5.0.11-dev - 20120503 - $Id: 76b08b24596e12d4553bd41fc93cccd5bac2fe7a $
Compression => not supported
core SSL => supported
extended SSL => not supported
Command buffer size => 4096
Read buffer size => 32768
Read timeout => 31536000
Collecting statistics => Yes
Collecting memory statistics => No
Tracing => n/a
Loaded plugins => mysqlnd,debug_trace,auth_plugin_mysql_native_password,auth_plugin_mysql_clear_password
API Extensions =>

mysqlnd statistics =>
bytes_sent => 0
bytes_received => 0
packets_sent => 0
packets_received => 0
protocol_overhead_in => 0
protocol_overhead_out => 0
bytes_received_ok_packet => 0
bytes_received_eof_packet => 0
bytes_received_rset_header_packet => 0
bytes_received_rset_field_meta_packet => 0
bytes_received_rset_row_packet => 0
bytes_received_prepare_response_packet => 0
bytes_received_change_user_packet => 0
packets_sent_command => 0
packets_received_ok => 0
packets_received_eof => 0
packets_received_rset_header => 0
packets_received_rset_field_meta => 0
packets_received_rset_row => 0
packets_received_prepare_response => 0
packets_received_change_user => 0
result_set_queries => 0
non_result_set_queries => 0
no_index_used => 0
bad_index_used => 0
slow_queries => 0
buffered_sets => 0
unbuffered_sets => 0
ps_buffered_sets => 0
ps_unbuffered_sets => 0
flushed_normal_sets => 0
flushed_ps_sets => 0
ps_prepared_never_executed => 0
ps_prepared_once_executed => 0
rows_fetched_from_server_normal => 0
rows_fetched_from_server_ps => 0
rows_buffered_from_client_normal => 0
rows_buffered_from_client_ps => 0
rows_fetched_from_client_normal_buffered => 0
rows_fetched_from_client_normal_unbuffered => 0
rows_fetched_from_client_ps_buffered => 0
rows_fetched_from_client_ps_unbuffered => 0
rows_fetched_from_client_ps_cursor => 0
rows_affected_normal => 0
rows_affected_ps => 0
rows_skipped_normal => 0
rows_skipped_ps => 0
copy_on_write_saved => 0
copy_on_write_performed => 0
command_buffer_too_small => 0
connect_success => 0
connect_failure => 0
connection_reused => 0
reconnect => 0
pconnect_success => 0
active_connections => 0
active_persistent_connections => 0
explicit_close => 0
implicit_close => 0
disconnect_close => 0
in_middle_of_command_close => 0
explicit_free_result => 0
implicit_free_result => 0
explicit_stmt_close => 0
implicit_stmt_close => 0
mem_emalloc_count => 0
mem_emalloc_amount => 0
mem_ecalloc_count => 0
mem_ecalloc_amount => 0
mem_erealloc_count => 0
mem_erealloc_amount => 0
mem_efree_count => 0
mem_efree_amount => 0
mem_malloc_count => 0
mem_malloc_amount => 0
mem_calloc_count => 0
mem_calloc_amount => 0
mem_realloc_count => 0
mem_realloc_amount => 0
mem_free_count => 0
mem_free_amount => 0
mem_estrndup_count => 0
mem_strndup_count => 0
mem_estndup_count => 0
mem_strdup_count => 0
proto_text_fetched_null => 0
proto_text_fetched_bit => 0
proto_text_fetched_tinyint => 0
proto_text_fetched_short => 0
proto_text_fetched_int24 => 0
proto_text_fetched_int => 0
proto_text_fetched_bigint => 0
proto_text_fetched_decimal => 0
proto_text_fetched_float => 0
proto_text_fetched_double => 0
proto_text_fetched_date => 0
proto_text_fetched_year => 0
proto_text_fetched_time => 0
proto_text_fetched_datetime => 0
proto_text_fetched_timestamp => 0
proto_text_fetched_string => 0
proto_text_fetched_blob => 0
proto_text_fetched_enum => 0
proto_text_fetched_set => 0
proto_text_fetched_geometry => 0
proto_text_fetched_other => 0
proto_binary_fetched_null => 0
proto_binary_fetched_bit => 0
proto_binary_fetched_tinyint => 0
proto_binary_fetched_short => 0
proto_binary_fetched_int24 => 0
proto_binary_fetched_int => 0
proto_binary_fetched_bigint => 0
proto_binary_fetched_decimal => 0
proto_binary_fetched_float => 0
proto_binary_fetched_double => 0
proto_binary_fetched_date => 0
proto_binary_fetched_year => 0
proto_binary_fetched_time => 0
proto_binary_fetched_datetime => 0
proto_binary_fetched_timestamp => 0
proto_binary_fetched_string => 0
proto_binary_fetched_json => 0
proto_binary_fetched_blob => 0
proto_binary_fetched_enum => 0
proto_binary_fetched_set => 0
proto_binary_fetched_geometry => 0
proto_binary_fetched_other => 0
init_command_executed_count => 0
init_command_failed_count => 0
com_quit => 0
com_init_db => 0
com_query => 0
com_field_list => 0
com_create_db => 0
com_drop_db => 0
com_refresh => 0
com_shutdown => 0
com_statistics => 0
com_process_info => 0
com_connect => 0
com_process_kill => 0
com_debug => 0
com_ping => 0
com_time => 0
com_delayed_insert => 0
com_change_user => 0
com_binlog_dump => 0
com_table_dump => 0
com_connect_out => 0
com_register_slave => 0
com_stmt_prepare => 0
com_stmt_execute => 0
com_stmt_send_long_data => 0
com_stmt_close => 0
com_stmt_reset => 0
com_stmt_set_option => 0
com_stmt_fetch => 0
com_deamon => 0
bytes_received_real_data_normal => 0
bytes_received_real_data_ps => 0

openssl

OpenSSL support => enabled
OpenSSL Library Version => OpenSSL 1.0.1s-freebsd 1 Mar 2016
OpenSSL Header Version => OpenSSL 1.0.1s-freebsd 1 Mar 2016
Openssl default config => /etc/ssl/openssl.cnf

Directive => Local Value => Master Value
openssl.cafile => no value => no value
openssl.capath => no value => no value

pcntl

pcntl support => enabled

pcre

PCRE (Perl Compatible Regular Expressions) Support => enabled
PCRE Library Version => 8.38 2015-11-23

Directive => Local Value => Master Value
pcre.backtrack_limit => 1000000 => 1000000
pcre.recursion_limit => 100000 => 100000

PDO

PDO support => enabled
PDO drivers => sqlite

pdo_sqlite

PDO Driver for SQLite 3.x => enabled
SQLite Library => 3.11.1

pfSense

Version => 1.0

posix

Revision => $Id: 5f4acc20904b1406142f2a0ede068db048c77e77 $

radius

radius support => enabled
version => 1.2.7

readline

Readline Support => enabled
Readline library => 5.2

Directive => Local Value => Master Value
cli.pager => no value => no value
cli.prompt => \b \> => \b \>

Reflection

Reflection => enabled
Version => $Id: fbcf7a77ca8e3d4cd7501de8025235b947b8240f $

rrd

rrd tool module => enabled
rrd tool module version => 1.1.3
rrdtool library version => 1.5.5

session

Session Support => enabled
Registered save handlers => files user
Registered serializer handlers => php_serialize php php_binary

Directive => Local Value => Master Value
session.auto_start => Off => Off
session.cache_expire => 180 => 180
session.cache_limiter => nocache => nocache
session.cookie_domain => no value => no value
session.cookie_httponly => Off => Off
session.cookie_lifetime => 0 => 0
session.cookie_path => / => /
session.cookie_secure => Off => Off
session.entropy_file => /dev/urandom => /dev/urandom
session.entropy_length => 32 => 32
session.gc_divisor => 100 => 100
session.gc_maxlifetime => 1440 => 1440
session.gc_probability => 1 => 1
session.hash_bits_per_character => 5 => 5
session.hash_function => 1 => 1
session.name => PHPSESSID => PHPSESSID
session.referer_check => no value => no value
session.save_handler => files => files
session.save_path => no value => no value
session.serialize_handler => php => php
session.upload_progress.cleanup => On => On
session.upload_progress.enabled => On => On
session.upload_progress.freq => 1% => 1%
session.upload_progress.min_freq => 1 => 1
session.upload_progress.name => PHP_SESSION_UPLOAD_PROGRESS => PHP_SESSION_UPLOAD_PROGRESS
session.upload_progress.prefix => upload_progress_ => upload_progress_
session.use_cookies => On => On
session.use_only_cookies => On => On
session.use_strict_mode => Off => Off
session.use_trans_sid => 0 => 0

shmop

shmop support => enabled

SimpleXML

Simplexml support => enabled
Revision => $Id: 07fc6546e896094aed794aea4691f0151774d955 $
Schema support => enabled

sockets

Sockets Support => enabled

SPL

SPL support => enabled
Interfaces => Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubject
Classes => AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, CallbackFilterIterator, DirectoryIterator, DomainException, EmptyIterator, FilesystemIterator, FilterIterator, GlobIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, MultipleIterator, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveCallbackFilterIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RecursiveTreeIterator, RegexIterator, RuntimeException, SplDoublyLinkedList, SplFileInfo, SplFileObject, SplFixedArray, SplHeap, SplMinHeap, SplMaxHeap, SplObjectStorage, SplPriorityQueue, SplQueue, SplStack, SplTempFileObject, UnderflowException, UnexpectedValueException

sqlite3

SQLite3 support => enabled
SQLite3 module version => 0.7-dev
SQLite Library => 3.11.1

Directive => Local Value => Master Value
sqlite3.extension_dir => no value => no value

ssh2

SSH2 support => enabled
extension version => 0.12
libssh2 version => 1.6.0
banner => SSH-2.0-libssh2_1.6.0

standard

Dynamic Library Support => enabled
Path to sendmail => /usr/sbin/sendmail -t -i

Directive => Local Value => Master Value
assert.active => 1 => 1
assert.bail => 0 => 0
assert.callback => no value => no value
assert.quiet_eval => 0 => 0
assert.warning => 1 => 1
auto_detect_line_endings => 0 => 0
default_socket_timeout => 60 => 60
from => no value => no value
url_rewriter.tags => a=href,area=href,frame=src,form=,fieldset= => a=href,area=href,frame=src,form=,fieldset=
user_agent => no value => no value

suhosin

This server is protected with the Suhosin Extension 0.9.38

Copyright (c) 2006-2007 Hardened-PHP Project
Copyright (c) 2007-2015 SektionEins GmbH

Directive => Local Value => Master Value
suhosin.apc_bug_workaround => Off => Off
suhosin.cookie.checkraddr => 0 => 0
suhosin.cookie.cryptdocroot => On => On
suhosin.cookie.cryptkey => [ protected ] => [ protected ]
suhosin.cookie.cryptlist => no value => no value
suhosin.cookie.cryptraddr => 0 => 0
suhosin.cookie.cryptua => On => On
suhosin.cookie.disallow_nul => 1 => 1
suhosin.cookie.disallow_ws => 1 => 1
suhosin.cookie.encrypt => Off => Off
suhosin.cookie.max_array_depth => 50 => 50
suhosin.cookie.max_array_index_length => 64 => 64
suhosin.cookie.max_name_length => 64 => 64
suhosin.cookie.max_totalname_length => 256 => 256
suhosin.cookie.max_value_length => 10000 => 10000
suhosin.cookie.max_vars => 100 => 100
suhosin.cookie.plainlist => no value => no value
suhosin.coredump => Off => Off
suhosin.disable.display_errors => Off => Off
suhosin.executor.allow_symlink => Off => Off
suhosin.executor.disable_emodifier => Off => Off
suhosin.executor.disable_eval => Off => Off
suhosin.executor.eval.blacklist => no value => no value
suhosin.executor.eval.whitelist => no value => no value
suhosin.executor.func.blacklist => no value => no value
suhosin.executor.func.whitelist => no value => no value
suhosin.executor.include.allow_writable_files => On => On
suhosin.executor.include.blacklist => no value => no value
suhosin.executor.include.max_traversal => 0 => 0
suhosin.executor.include.whitelist => no value => no value
suhosin.executor.max_depth => 750 => 750
suhosin.filter.action => no value => no value
suhosin.get.disallow_nul => 1 => 1
suhosin.get.disallow_ws => 0 => 0
suhosin.get.max_array_depth => 50 => 50
suhosin.get.max_array_index_length => 256 => 256
suhosin.get.max_name_length => 64 => 64
suhosin.get.max_totalname_length => 256 => 256
suhosin.get.max_value_length => 500000 => 500000
suhosin.get.max_vars => 5000 => 5000
suhosin.log.file => 0 => 0
suhosin.log.file.name => no value => no value
suhosin.log.file.time => On => On
suhosin.log.phpscript => 0 => 0
suhosin.log.phpscript.is_safe => Off => Off
suhosin.log.phpscript.name => no value => no value
suhosin.log.sapi => 0 => 0
suhosin.log.script => 0 => 0
suhosin.log.script.name => no value => no value
suhosin.log.stdout => 0 => 0
suhosin.log.syslog => no value => no value
suhosin.log.syslog.facility => no value => no value
suhosin.log.syslog.priority => no value => no value
suhosin.log.use-x-forwarded-for => Off => Off
suhosin.mail.protect => 0 => 0
suhosin.memory_limit => 512435456 => 512435456
suhosin.mt_srand.ignore => On => On
suhosin.multiheader => Off => Off
suhosin.perdir => 0 => 0
suhosin.post.disallow_nul => 1 => 1
suhosin.post.disallow_ws => 0 => 0
suhosin.post.max_array_depth => 50 => 50
suhosin.post.max_array_index_length => 256 => 256
suhosin.post.max_name_length => 64 => 64
suhosin.post.max_totalname_length => 256 => 256
suhosin.post.max_value_length => 500000 => 500000
suhosin.post.max_vars => 5000 => 5000
suhosin.protectkey => On => On
suhosin.rand.reseed_every_request => Off => Off
suhosin.rand.seedingkey => [ protected ] => [ protected ]
suhosin.request.array_index_blacklist => '"+<>;() => '"+<>;()
suhosin.request.array_index_whitelist => no value => no value
suhosin.request.disallow_nul => 1 => 1
suhosin.request.disallow_ws => 0 => 0
suhosin.request.max_array_depth => 50 => 50
suhosin.request.max_array_index_length => 256 => 256
suhosin.request.max_totalname_length => 256 => 256
suhosin.request.max_value_length => 500000 => 500000
suhosin.request.max_varname_length => 64 => 64
suhosin.request.max_vars => 5000 => 5000
suhosin.server.encode => On => On
suhosin.server.strip => On => On
suhosin.session.checkraddr => 0 => 0
suhosin.session.cryptdocroot => On => On
suhosin.session.cryptkey => [ protected ] => [ protected ]
suhosin.session.cryptraddr => 0 => 0
suhosin.session.cryptua => Off => Off
suhosin.session.encrypt => On => On
suhosin.session.max_id_length => 128 => 128
suhosin.simulation => Off => Off
suhosin.sql.bailout_on_error => Off => Off
suhosin.sql.comment => 0 => 0
suhosin.sql.multiselect => 0 => 0
suhosin.sql.opencomment => 0 => 0
suhosin.sql.union => 0 => 0
suhosin.sql.user_match => no value => no value
suhosin.sql.user_postfix => no value => no value
suhosin.sql.user_prefix => no value => no value
suhosin.srand.ignore => On => On
suhosin.stealth => On => On
suhosin.upload.disallow_binary => 0 => 0
suhosin.upload.disallow_elf => 1 => 1
suhosin.upload.max_newlines => 100 => 100
suhosin.upload.max_uploads => 25 => 25
suhosin.upload.remove_binary => 0 => 0
suhosin.upload.verification_script => no value => no value

sysvmsg

sysvmsg support => enabled
Revision => $Id: 58590192720bc56939152fde3645d808b348bb9b $

tokenizer

Tokenizer Support => enabled

xdebug

xdebug support => enabled
Version => 2.2.5
IDE Key => root

Supported protocols => Revision
DBGp - Common DeBuGger Protocol => $Revision: 1.145 $

Directive => Local Value => Master Value
xdebug.auto_trace => Off => Off
xdebug.cli_color => 0 => 0
xdebug.collect_assignments => Off => Off
xdebug.collect_includes => On => On
xdebug.collect_params => 0 => 0
xdebug.collect_return => Off => Off
xdebug.collect_vars => Off => Off
xdebug.coverage_enable => On => On
xdebug.default_enable => On => On
xdebug.dump.COOKIE => no value => no value
xdebug.dump.ENV => no value => no value
xdebug.dump.FILES => no value => no value
xdebug.dump.GET => no value => no value
xdebug.dump.POST => no value => no value
xdebug.dump.REQUEST => no value => no value
xdebug.dump.SERVER => no value => no value
xdebug.dump.SESSION => no value => no value
xdebug.dump_globals => On => On
xdebug.dump_once => On => On
xdebug.dump_undefined => Off => Off
xdebug.extended_info => On => On
xdebug.file_link_format => no value => no value
xdebug.idekey => no value => no value
xdebug.max_nesting_level => 100 => 100
xdebug.overload_var_dump => On => On
xdebug.profiler_aggregate => Off => Off
xdebug.profiler_append => Off => Off
xdebug.profiler_enable => Off => Off
xdebug.profiler_enable_trigger => Off => Off
xdebug.profiler_output_dir => /tmp/ => /tmp/
xdebug.profiler_output_name => cachegrind.out.%p => cachegrind.out.%p
xdebug.remote_autostart => Off => Off
xdebug.remote_connect_back => Off => Off
xdebug.remote_cookie_expire_time => 3600 => 3600
xdebug.remote_enable => Off => Off
xdebug.remote_handler => dbgp => dbgp
xdebug.remote_host => localhost => localhost
xdebug.remote_log => no value => no value
xdebug.remote_mode => req => req
xdebug.remote_port => 9000 => 9000
xdebug.scream => Off => Off
xdebug.show_exception_trace => Off => Off
xdebug.show_local_vars => Off => Off
xdebug.show_mem_delta => Off => Off
xdebug.trace_enable_trigger => Off => Off
xdebug.trace_format => 0 => 0
xdebug.trace_options => 0 => 0
xdebug.trace_output_dir => /tmp/ => /tmp/
xdebug.trace_output_name => trace.%c => trace.%c
xdebug.var_display_max_children => 128 => 128
xdebug.var_display_max_data => 512 => 512
xdebug.var_display_max_depth => 3 => 3

xml

XML Support => active
XML Namespace Support => active
libxml2 Version => 2.9.3

xmlreader

XMLReader => enabled

xmlwriter

XMLWriter => enabled

Zend OPcache

Opcode Caching => Disabled
Optimization => Disabled
Startup Failed => Opcode Caching is disabled for CLI

Directive => Local Value => Master Value
opcache.blacklist_filename => no value => no value
opcache.consistency_checks => 0 => 0
opcache.dups_fix => Off => Off
opcache.enable => On => On
opcache.enable_cli => Off => Off
opcache.enable_file_override => Off => Off
opcache.error_log => no value => no value
opcache.fast_shutdown => 0 => 0
opcache.file_update_protection => 2 => 2
opcache.force_restart_timeout => 180 => 180
opcache.inherited_hack => On => On
opcache.interned_strings_buffer => 4 => 4
opcache.load_comments => 1 => 1
opcache.log_verbosity_level => 1 => 1
opcache.max_accelerated_files => 2000 => 2000
opcache.max_file_size => 0 => 0
opcache.max_wasted_percentage => 5 => 5
opcache.memory_consumption => 50 => 50
opcache.optimization_level => 0x7FFFBFFF => 0x7FFFBFFF
opcache.preferred_memory_model => no value => no value
opcache.protect_memory => 0 => 0
opcache.restrict_api => no value => no value
opcache.revalidate_freq => 2 => 2
opcache.revalidate_path => Off => Off
opcache.save_comments => 1 => 1
opcache.use_cwd => On => On
opcache.validate_timestamps => On => On

zlib

ZLib Support => enabled
Stream Wrapper => compress.zlib://
Stream Filter => zlib.inflate, zlib.deflate
Compiled Version => 1.2.8
Linked Version => 1.2.8

Directive => Local Value => Master Value
zlib.output_compression => Off => Off
zlib.output_compression_level => 1 => 1
zlib.output_handler => no value => no value

zmq

ZMQ extension => enabled
ZMQ extension version => 1.1.3
libzmq version => 4.1.4

Additional Modules

Module Name
sysvsem
sysvshm

Environment

Variable => Value
SSH_CLIENT => 10.61.21.17 51421 22
LOGNAME => root
MAIL => /var/mail/root
PATH => /sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin:/root/bin
PWD => /root
TERM => xterm
SSH_TTY => /dev/pts/0
USER => root
HOME => /root
SSH_CONNECTION => 10.61.21.17 51421 10.165.128.211 22
SHELL => /bin/sh
BLOCKSIZE => K
HOSTTYPE => FreeBSD
VENDOR => amd
OSTYPE => FreeBSD
MACHTYPE => x86_64
SHLVL => 1
GROUP => wheel
HOST => TLWV-FW1.EISLAB-IL.INTRA
REMOTEHOST => 10.61.21.17
CLICOLOR => true
LSCOLORS => exfxcxdxbxegedabagacad

PHP Variables

Variable => Value
_SERVER["SSH_CLIENT"] => 10.61.21.17 51421 22
_SERVER["LOGNAME"] => root
_SERVER["MAIL"] => /var/mail/root
_SERVER["PATH"] => /sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin:/root/bin
_SERVER["PWD"] => /root
_SERVER["TERM"] => xterm
_SERVER["SSH_TTY"] => /dev/pts/0
_SERVER["USER"] => root
_SERVER["HOME"] => /root
_SERVER["SSH_CONNECTION"] => 10.61.21.17 51421 10.165.128.211 22
_SERVER["SHELL"] => /bin/sh
_SERVER["BLOCKSIZE"] => K
_SERVER["HOSTTYPE"] => FreeBSD
_SERVER["VENDOR"] => amd
_SERVER["OSTYPE"] => FreeBSD
_SERVER["MACHTYPE"] => x86_64
_SERVER["SHLVL"] => 1
_SERVER["GROUP"] => wheel
_SERVER["HOST"] => TLWV-FW1.EISLAB-IL.INTRA
_SERVER["REMOTEHOST"] => 10.61.21.17
_SERVER["CLICOLOR"] => true
_SERVER["LSCOLORS"] => exfxcxdxbxegedabagacad
_SERVER["PHP_SELF"] => -
_SERVER["SCRIPT_NAME"] => -
_SERVER["SCRIPT_FILENAME"] =>
_SERVER["PATH_TRANSLATED"] =>
_SERVER["DOCUMENT_ROOT"] =>
_SERVER["REQUEST_TIME_FLOAT"] => 1464158413.7898
_SERVER["REQUEST_TIME"] => 1464158413
_SERVER["argv"] => Array
(
[0] => -
)

_SERVER["argc"] => 1

PHP License
This program is free software; you can redistribute it and/or modify
it under the terms of the PHP License as published by the PHP Group
and included in the distribution in the file: LICENSE

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

If you did not receive a copy of the PHP license, or have any
questions about PHP licensing, please contact .

#11 Updated by Zeev Zalessky almost 3 years ago

change of config.inc didn't helped

Crash report begins.  Anonymous machine information:

amd64
10.3-RELEASE-p3
FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT 2016 root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense

Crash report details:

PHP Errors:
[25-May-2016 10:51:33 Asia/Jerusalem] PHP Fatal error: Allowed memory size of 536870912 bytes exhausted (tried to allocate 128 bytes) in /usr/local/www/status_carp.php on line 261
[25-May-2016 10:51:33 Asia/Jerusalem] PHP Stack trace:
[25-May-2016 10:51:33 Asia/Jerusalem] PHP 1. {main}() /usr/local/www/status_carp.php:0
[25-May-2016 10:51:33 Asia/Jerusalem] PHP 2. pfSense_get_pf_states() /usr/local/www/status_carp.php:261

#12 Updated by Zeev Zalessky almost 3 years ago

even update to 1GB is not helped:
_ Crash report begins. Anonymous machine information:

amd64
10.3-RELEASE-p3
FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT 2016 root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense

Crash report details:

PHP Errors:
[25-May-2016 11:03:44 Asia/Jerusalem] PHP Fatal error: Allowed memory size of 1073741824 bytes exhausted (tried to allocate 32 bytes) in /usr/local/www/status_carp.php on line 261
[25-May-2016 11:03:44 Asia/Jerusalem] PHP Stack trace:
[25-May-2016 11:03:44 Asia/Jerusalem] PHP 1. {main}() /usr/local/www/status_carp.php:0
[25-May-2016 11:03:44 Asia/Jerusalem] PHP 2. pfSense_get_pf_states() /usr/local/www/status_carp.php:261_

looks like problem in another place

#13 Updated by Zeev Zalessky almost 3 years ago

i found that following code is cause the crash:
/usr/local/www/status_carp.php lines 258-268
$nodes = array();
$states = pfSense_get_pf_states();
for ($i = 0; $states != NULL && $i < count($states); $i++) {
$nodes[$states[$i]['creatorid']] = 1;
}
foreach ($nodes as $node => $nenabled) {
echo "<li>$node</li>";
}
?>

#14 Updated by Phillip Davis almost 3 years ago

Can you get the value of count($states) ?
It will be interesting to know if the count of states is really crazy high.

#15 Updated by Zeev Zalessky almost 3 years ago

sorry i can't
i changed

$nodes = array();
$states = pfSense_get_pf_states();
for ($i = 0; $states != NULL && $i < count($states); $i++) {
$nodes[$states[$i]['creatorid']] = 1;
}
foreach ($nodes as $node => $nenabled) {
echo "<li>$node</li>";
}
?>

to
@

$nodes = array();
$states = pfSense_get_pf_states();
/*for ($i = 0; $states != NULL && $i < count($states); $i++) {
$nodes[$states[$i]['creatorid']] = 1;
}
foreach ($nodes as $node => $nenabled) {
echo "&lt;li&gt;$node&lt;/li&gt;";
}*/
?>
@

and got:

Crash report begins.  Anonymous machine information:

amd64
10.3-RELEASE-p3
FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT 2016 root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense

Crash report details:

PHP Errors:
[25-May-2016 12:33:03 Asia/Jerusalem] PHP Fatal error: Allowed memory size of 1073741824 bytes exhausted (tried to allocate 82 bytes) in /usr/local/www/status_carp.php on line 261
[25-May-2016 12:33:03 Asia/Jerusalem] PHP Stack trace:
[25-May-2016 12:33:03 Asia/Jerusalem] PHP 1. {main}() /usr/local/www/status_carp.php:0
[25-May-2016 12:33:03 Asia/Jerusalem] PHP 2. pfSense_get_pf_states() /usr/local/www/status_carp.php:261

#16 Updated by Phillip Davis almost 3 years ago

So that is running out of memory in pfSense_get_pf_states() and/or it trying to create the return $states array.

#17 Updated by Chris Buechler almost 3 years ago

Zeev: that isn't a valid test, you have to require config.inc like all the pages in the GUI do to get the ini_set with the increased memory limit.

2.3.1_1 increases that limit to 512 MB. There is still some large number of states that will exhaust that limit, as there always has been.

#18 Updated by Zeev Zalessky almost 3 years ago

after upgrade to 2.3.1_1 same problem
Crash report begins. Anonymous machine information:

amd64
10.3-RELEASE-p3
FreeBSD 10.3-RELEASE-p3 #2 1988fec(RELENG_2_3_1): Wed May 25 14:14:46 CDT 2016 root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense

Crash report details:

PHP Errors:
[26-May-2016 08:18:43 Asia/Jerusalem] PHP Fatal error: Allowed memory size of 536870912 bytes exhausted (tried to allocate 81 bytes) in /usr/local/www/status_carp.php on line 261
[26-May-2016 08:18:43 Asia/Jerusalem] PHP Stack trace:
[26-May-2016 08:18:43 Asia/Jerusalem] PHP 1. {main}() /usr/local/www/status_carp.php:0
[26-May-2016 08:18:43 Asia/Jerusalem] PHP 2. pfSense_get_pf_states() /usr/local/www/status_carp.php:261

Filename: /var/crash/minfree
2048

if i remark out /usr/local/www/status_carp.php lines 258-268

page is displayed without states. the problem is in line 261 :

$states = pfSense_get_pf_states();

#19 Updated by Chris Buechler almost 3 years ago

That's the "still some large number of states", just exhausting the larger limit. How many states do you have active? 'pfctl -si' from command prompt.

#20 Updated by Zeev Zalessky almost 3 years ago

on standby node:

Status: Enabled for 0 days 00:26:12           Debug: Urgent

Interface Stats for lagg1_vlan600     IPv4             IPv6
  Bytes In                          380978            15708
  Bytes Out                          88652                0
  Packets In
    Passed                            7250              152
    Blocked                              0                0
  Packets Out
    Passed                            3124                0
    Blocked                              0                0

State Table                          Total             Rate
  current entries                   502561
  searches                        78020483        49631.4/s
  inserts                          8876345         5646.5/s
  removals                         8373532         5326.7/s
Counters
  match                             333764          212.3/s
  bad-offset                             0            0.0/s
  fragment                               0            0.0/s
  short                                  0            0.0/s
  normalize                              0            0.0/s
  memory                                 0            0.0/s
  bad-timestamp                          0            0.0/s
  congestion                             0            0.0/s
  ip-option                           1335            0.8/s
  proto-cksum                            0            0.0/s
  state-mismatch                         0            0.0/s
  state-insert                          64            0.0/s
  state-limit                            0            0.0/s
  src-limit                              0            0.0/s
  synproxy                               0            0.0/s
  divert                                 0            0.0/s


on active node:
Status: Enabled for 24 days 19:09:49          Debug: Urgent

Interface Stats for lagg1_vlan600     IPv4             IPv6
  Bytes In                  10090701968662         12592044
  Bytes Out                  8868352279056                0
  Packets In
    Passed                     24666721968           122074
    Blocked                          27006               53
  Packets Out
    Passed                     25217023032                0
    Blocked                             70                0

State Table                          Total             Rate
  current entries                   543617
  searches                    216684826296       101132.2/s
  inserts                      14199756688         6627.4/s
  removals                     14199212959         6627.1/s
Counters
  match                        14282539301         6666.0/s
  bad-offset                             0            0.0/s
  fragment                               0            0.0/s
  short                                  1            0.0/s
  normalize                              0            0.0/s
  memory                                 0            0.0/s
  bad-timestamp                          0            0.0/s
  congestion                             0            0.0/s
  ip-option                        1790178            0.8/s
  proto-cksum                            0            0.0/s
  state-mismatch                   3707207            1.7/s
  state-insert                      181068            0.1/s
  state-limit                            0            0.0/s
  src-limit                              0            0.0/s
  synproxy                               0            0.0/s
  divert                                 0            0.0/s

#21 Updated by Zeev Zalessky almost 3 years ago

Hello,

Any news with this bug?

#22 Updated by Luiz Souza almost 3 years ago

  • Assignee set to Luiz Souza

#23 Updated by Zeev Zalessky almost 3 years ago

Hello,

Any ETA?

#24 Updated by Chris Buechler almost 3 years ago

  • Status changed from New to Feedback
  • Target version set to 2.3.1-p6
  • Affected Version changed from 2.3 to 2.3.x

restored 2.2.x and prior's method of obtaining the nodes, which will prevent it from running out of memory.

#25 Updated by Zeev Zalessky almost 3 years ago

Hello,

i added your changes and looks like it works. Chris you are the king :)

#26 Updated by Chris Buechler almost 3 years ago

  • Status changed from Feedback to Resolved
  • Assignee changed from Luiz Souza to Chris Buechler

works.

Thanks for the additional confirmation, Zeev.

#27 Updated by Chris Buechler almost 3 years ago

  • Target version changed from 2.3.1-p6 to 2.3.2

Also available in: Atom PDF