Re: [pfSense Support] CARP Bug in 1.2.3

2009-04-09 Thread Chris Buechler
On Thu, Apr 9, 2009 at 7:00 PM, Dimitri Rodis wrote: > Good deal. I'll go to a later snapshot then. > > Are upgrades between snapshots on embedded working at the moment, or should > I just reflash? > Yeah you got hit with the xmlparse.inc issue that was in snapshots for a couple days. I know CARP

[pfSense Support] Outbound traffic + 1.2.2 + My last clump of hair

2009-04-09 Thread Tim Roberts
I have many 1.2.2 PFSense gateways running. Somehow I have managed to mangle all but one of them today for certain types of outbound traffic. HTTP/DNS/POP/SMTP are all fine and lightning fast. SSH, Secure POP, Secure SMTP, some gaming, are all dead from the LAN out. I have advanced outbound nat

RE: [pfSense Support] CARP Bug in 1.2.3

2009-04-09 Thread Dimitri Rodis
Good deal. I'll go to a later snapshot then. Are upgrades between snapshots on embedded working at the moment, or should I just reflash? Dimitri Rodis Integrita Systems LLC http://www.integritasystems.com -Original Message- From: Scott Ullrich [mailto:sullr...@gmail.com] Sent: Thursda

Re: [pfSense Support] CARP Bug in 1.2.3

2009-04-09 Thread Scott Ullrich
On Thu, Apr 9, 2009 at 1:57 PM, Dimitri Rodis wrote: > The snapshot I'm using is dated April 1.. that's a couple of days after the > hackathon, I believe. Any idea when the xmlparse.inc from HEAD was removed? You where affected then. It was removed for causing various problems such as these. S

RE: [pfSense Support] CARP Bug in 1.2.3

2009-04-09 Thread Dimitri Rodis
The snapshot I'm using is dated April 1.. that's a couple of days after the hackathon, I believe. Any idea when the xmlparse.inc from HEAD was removed? Dimitri Rodis Integrita Systems LLC http://www.integritasystems.com -Original Message- From: Scott Ullrich [mailto:sullr...@gmail.com]

Re: [pfSense Support] CARP Bug in 1.2.3

2009-04-09 Thread Scott Ullrich
On Thu, Apr 9, 2009 at 12:37 PM, Dimitri Rodis wrote: > I think this is more obscure than you think-- this is on a snapshot build, > so how many people have 1) run a 1.2.3 snapshot, 2) _had_ a redundant CARP > config, and then 3) removed the redundant member and 4) added some Outbound > NAT rules

[pfSense Support] mptutil

2009-04-09 Thread slamp slamp
Has anyone used this utility on their pfsense install? http://perforce.freebsd.org/depotTreeBrowser.cgi?FSPC=//depot/user/jhb/raid/usr.sbin/mptutil I installed compiled it under FreeBSD 7.1 and when I run it in my pfsense 1.2.2 install it is not working. # ./mptutil show drives mptutil: mpt_ope

RE: [pfSense Support] CARP Bug in 1.2.3

2009-04-09 Thread Dimitri Rodis
I think this is more obscure than you think-- this is on a snapshot build, so how many people have 1) run a 1.2.3 snapshot, 2) _had_ a redundant CARP config, and then 3) removed the redundant member and 4) added some Outbound NAT rules and interface rules (which is what finally triggered the XMLRPC

Re: [pfSense Support] CARP Bug in 1.2.3

2009-04-09 Thread Scott Ullrich
On Wed, Apr 8, 2009 at 11:31 PM, Dimitri Rodis wrote: > Currently running: > > 1.2.3-RC1 > built on Wed Apr 1 16:59:10 EDT 2009 > > > > Changed the CARP config-- had a redundant member that I removed, so I shut > pfsync off. However, I kept getting messages along the top that XMLRPC sync > was fai

Re: [pfSense Support] Moving Target - How do people track down bandwidth usage...?

2009-04-09 Thread Gary Buckmaster
Jaime Díaz wrote: On Thu, Apr 9, 2009 at 9:56 AM, Chuck Mariotti wrote: Are either of these safe to run on embedded (Alix)? I did a custom install so that I can install Packages, so that I could run snort, but I can't seem to keep snort running, keeps shutting down by itself. So wonder if

Re: [pfSense Support] Moving Target - How do people track down bandwidth usage...?

2009-04-09 Thread Curtis LaMasters
I monitor ports on a managed switch with SNMP using Cacti or similar. Obviously not for everyone but at least I can determine who the problem child is. I have used NTOP in the past but my NTOP skills are lacking. Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.com On T

Re: [pfSense Support] Moving Target - How do people track down bandwidth usage...?

2009-04-09 Thread Jaime Díaz
On Thu, Apr 9, 2009 at 9:56 AM, Chuck Mariotti wrote: > Are either of these safe to run on embedded (Alix)? I did a custom install so > that I can install Packages, so that I could run snort, but I can't seem to > keep snort running, keeps shutting down by itself. So wonder if I'll run into > a

Re: [pfSense Support] Moving Target - How do people track down bandwidth usage...?

2009-04-09 Thread Paul Mansfield
Chuck Mariotti wrote: > Are either of these safe to run on embedded (Alix)? I did a custom install so > that I can install Packages, so that I could run snort, but I can't seem to > keep snort running, keeps shutting down by itself. So wonder if I'll run into > any issues with these... darksta

RE: [pfSense Support] Moving Target - How do people track down bandwidth usage...?

2009-04-09 Thread Chuck Mariotti
Are either of these safe to run on embedded (Alix)? I did a custom install so that I can install Packages, so that I could run snort, but I can't seem to keep snort running, keeps shutting down by itself. So wonder if I'll run into any issues with these... -Original Message- From: Jaime

Re: [pfSense Support] Moving Target - How do people track down bandwidth usage...?

2009-04-09 Thread Jaime Díaz
On Thu, Apr 9, 2009 at 9:39 AM, Chuck Mariotti wrote: > Yesterday we had a huge hit on our bandwidth for a period of time... How are > people tracking down bandwidth usage to specific machines, etc...? > > By the time I captured some packets and pulled up wireshark, the hit was > gone. It showed

[pfSense Support] Moving Target - How do people track down bandwidth usage...?

2009-04-09 Thread Chuck Mariotti
Yesterday we had a huge hit on our bandwidth for a period of time... How are people tracking down bandwidth usage to specific machines, etc...? By the time I captured some packets and pulled up wireshark, the hit was gone. It showed up later in the day, but again, too fast to track down. Is the