Re: [pfSense] pfsync_undefer_state: unable to find deferred state
For the record, turning off state syncing completely does stop the errors. Strange that works but turning off sync for the affected rule doesn't...I wonder if that is because the rule with the limiter is on the LAN interface and it is still syncing state for response packets coming in on the WAN interface? -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Steve Yates Sent: Tuesday, October 18, 2016 3:33 PM To: pfSense Support and Discussion Mailing List Subject: Re: [pfSense] pfsync_undefer_state: unable to find deferred state I thought I'd post again to see if anyone has an idea of how to fix "pfsync_undefer_state: unable to find deferred state"? I found an August blog post http://phil.lavin.me.uk/2016/08/solved-pfsense-pfsync_undefer_state-unable-to-find-deferred-state/ which says to turn off HA state syncing completely. I haven't gone that far but did check "No pfSync" on the firewall rule per the below, to no avail. -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Steve Yates Sent: Friday, July 8, 2016 4:30 PM To: pfSense Support and Discussion Mailing List Subject: [pfSense] pfsync_undefer_state: unable to find deferred state I found thread https://forum.pfsense.org/index.php?topic=87541.60 ...and posted there but it's old and references 2.1.x and 2.2.x versions. After upgrading from 2.2.6 to 2.3.1_5 we get a long spew of this logged during a Limiter-limited rsync each night (it also shows on the console screen): Jul 8 02:47:36 kernel defer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred state Jul 8 02:47:36 kernel _undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_und efer_state: unable to find deferred statepf Jul 8 02:47:36 kernel ync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_ undefer_state: unable to find deferred stat It continues while traffic that triggers the limiter rule is in effect and ends immediately upon traffic's end. The Limiter set up is only using Firewall\Traffic Shaper\Limiters: LimitBackupUpLAN 50Mbit/sOvernight [Mon - Sun / 0:00-6:45] 15Mbit/sDay LimitBackupUpLAN 50Mbit/sOvernight 15Mbit/sDay The limiter is on a rule on the LAN interface, with "In / Out pipe" set. It only matches to one IP. Neither checking "No pfSync" nor setting "State type" to None seem to have any effect. I think that's the equivalent of what they mentioned in the [forum.pfsense.org] thread... 'unchek the flag "State Type" to "NO pfsync".' I can duplicate this at will...in this case an "rsync --dry-run" is plenty. It doesn't seem to have any effect on traffic since the copy works fine, it appears to just be a logging issue. -- Steve Yates ITS, Inc. ___
Re: [pfSense] pfsync_undefer_state: unable to find deferred state
I thought I'd post again to see if anyone has an idea of how to fix "pfsync_undefer_state: unable to find deferred state"? I found an August blog post http://phil.lavin.me.uk/2016/08/solved-pfsense-pfsync_undefer_state-unable-to-find-deferred-state/ which says to turn off HA state syncing completely. I haven't gone that far but did check "No pfSync" on the firewall rule per the below, to no avail. -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Steve Yates Sent: Friday, July 8, 2016 4:30 PM To: pfSense Support and Discussion Mailing List Subject: [pfSense] pfsync_undefer_state: unable to find deferred state I found thread https://forum.pfsense.org/index.php?topic=87541.60 ...and posted there but it's old and references 2.1.x and 2.2.x versions. After upgrading from 2.2.6 to 2.3.1_5 we get a long spew of this logged during a Limiter-limited rsync each night (it also shows on the console screen): Jul 8 02:47:36 kernel defer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred state Jul 8 02:47:36 kernel _undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_und efer_state: unable to find deferred statepf Jul 8 02:47:36 kernel ync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_ undefer_state: unable to find deferred stat It continues while traffic that triggers the limiter rule is in effect and ends immediately upon traffic's end. The Limiter set up is only using Firewall\Traffic Shaper\Limiters: LimitBackupUpLAN 50Mbit/sOvernight [Mon - Sun / 0:00-6:45] 15Mbit/sDay LimitBackupUpLAN 50Mbit/sOvernight 15Mbit/sDay The limiter is on a rule on the LAN interface, with "In / Out pipe" set. It only matches to one IP. Neither checking "No pfSync" nor setting "State type" to None seem to have any effect. I think that's the equivalent of what they mentioned in the [forum.pfsense.org] thread... 'unchek the flag "State Type" to "NO pfsync".' I can duplicate this at will...in this case an "rsync --dry-run" is plenty. It doesn't seem to have any effect on traffic since the copy works fine, it appears to just be a logging issue. -- Steve Yates ITS, Inc. ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsync_undefer_state: unable to find deferred state
This may or may not be related but after he upgrade to 2.3.1 I did find a continual stream of checksum error alerts in Suricata. As found online, disabling Hardware Checksum Offloading fixed it, even though this is on a virtual machine. -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Steve Yates Sent: Friday, July 8, 2016 4:30 PM To: pfSense Support and Discussion Mailing List Subject: [pfSense] pfsync_undefer_state: unable to find deferred state I found thread https://forum.pfsense.org/index.php?topic=87541.60 ...and posted there but it's old and references 2.1.x and 2.2.x versions. After upgrading from 2.2.6 to 2.3.1_5 we get a long spew of this logged during a Limiter-limited rsync each night (it also shows on the console screen): Jul 8 02:47:36 kernel defer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred state Jul 8 02:47:36 kernel _undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_und efer_state: unable to find deferred statepf Jul 8 02:47:36 kernel ync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_ undefer_state: unable to find deferred stat It continues while traffic that triggers the limiter rule is in effect and ends immediately upon traffic's end. The Limiter set up is only using Firewall\Traffic Shaper\Limiters: LimitBackupUpLAN 50Mbit/sOvernight [Mon - Sun / 0:00-6:45] 15Mbit/sDay LimitBackupUpLAN 50Mbit/sOvernight 15Mbit/sDay The limiter is on a rule on the LAN interface, with "In / Out pipe" set. It only matches to one IP. Neither checking "No pfSync" nor setting "State type" to None seem to have any effect. I think that's the equivalent of what they mentioned in the forum thread... 'unchek the flag "State Type" to "NO pfsync".' I can duplicate this at will...in this case an "rsync --dry-run" is plenty. It doesn't seem to have any effect on traffic since the copy works fine, it appears to just be a logging issue. -- Steve Yates ITS, Inc. ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
[pfSense] pfsync_undefer_state: unable to find deferred state
I found thread https://forum.pfsense.org/index.php?topic=87541.60 ...and posted there but it's old and references 2.1.x and 2.2.x versions. After upgrading from 2.2.6 to 2.3.1_5 we get a long spew of this logged during a Limiter-limited rsync each night (it also shows on the console screen): Jul 8 02:47:36 kernel defer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred state Jul 8 02:47:36 kernel _undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_und efer_state: unable to find deferred statepf Jul 8 02:47:36 kernel ync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_undefer_state: unable to find deferred statepfsync_ undefer_state: unable to find deferred stat It continues while traffic that triggers the limiter rule is in effect and ends immediately upon traffic's end. The Limiter set up is only using Firewall\Traffic Shaper\Limiters: LimitBackupUpLAN 50Mbit/sOvernight [Mon - Sun / 0:00-6:45] 15Mbit/sDay LimitBackupUpLAN 50Mbit/sOvernight 15Mbit/sDay The limiter is on a rule on the LAN interface, with "In / Out pipe" set. It only matches to one IP. Neither checking "No pfSync" nor setting "State type" to None seem to have any effect. I think that's the equivalent of what they mentioned in the forum thread... 'unchek the flag "State Type" to "NO pfsync".' I can duplicate this at will...in this case an "rsync --dry-run" is plenty. It doesn't seem to have any effect on traffic since the copy works fine, it appears to just be a logging issue. -- Steve Yates ITS, Inc. ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
