OK, so it's been a day with my state table at 20,000.  RAM is at 20% and CPU time averages around 8%

It is still locking up, but browsing around I have come across something that may help.  On the RRD Graphs I had noticed before it seemed traffic peaked when the lock ups occured... but not always.  I then went to the Graph "packets" and EVERY time the states lock the packets jump up to 2.0k up and 4.0k down.  Once I reset the states the packets will go back to a normal state.
So far today (looking at the RRD graph for today) I can see 15 spikes for the last 24 hours.  The Greatest time between was 4 hours from 00:00 to 04:30.  Hope this helps!  I'm thinking of redoing the config from scratch, but I have a lot of virtual IP and 1:1 mappings that I will loose.  If I backup, I'm afraid that whatever is causing this will return.  Give me your thoughts on this. Thanks!
-Tim

On Wed, 2006-06-28 at 01:18 +0200, Holger Bauer wrote:
Normal should be fine. See what the changed state limit does first.

Holger

> -----Original Message-----
> From: Tim Dickson [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, June 28, 2006 12:55 AM
> To: support@pfsense.com
> Subject: RE: [pfSense Support] States Locking Up
> 
> 
> OK, I've changed my states to 20k
> What "Mode" should I be using?  We are connected via a full T1
> right now I have it set up for normal.
> Thanks!
> -Tim
> 
> -----Original Message-----
> From: Holger Bauer [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, June 27, 2006 3:09 PM
> To: support@pfsense.com
> Subject: RE: [pfSense Support] States Locking Up
> 
> 
> As you're not hitting the maximum limit this should not be 
> the issue but as you have lots of RAM you can boost this 
> value up just to see if it makes any difference.
> 
> Holger
> 
> > -----Original Message-----
> > From: Tim Dickson [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, June 27, 2006 5:07 PM
> > To: support@pfsense.com
> > Subject: RE: [pfSense Support] States Locking Up
> > 
> > 
> > Should I set me state limit to 1000 or something? seems 
> > silly, but I'm willing to try anthing to get this to work.
> > -tim
> > 
> > -----Original Message-----
> > From: Holger Bauer [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, June 26, 2006 2:58 PM
> > To: support@pfsense.com
> > Subject: RE: [pfSense Support] States Locking Up
> > 
> > 
> > What is your state limit at system>advanced and how many 
> > states do you hit when the problem occurs?
> > 
> > Holger
> > -----Original Message-----
> > From: Tim Dickson [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, June 26, 2006 7:39 PM
> > To: support@pfsense.com
> > Subject: [pfSense Support] States Locking Up
> > 
> > 
> > I submitted to this list last week and am hoping I can hit 
> > some fresh brain cells this week :) 
> > I am having an issue with states locking up.  This happens 
> > every half an hour or so (it's completely random... can go 
> > hours or minutes).  When it happens if I reset states it 
> > clears up and all is well.  Also while it happens if I ping 
> > google it will drop roughly 3 of every 4 packets sent. 
> > Most current connections will remain (like a dowload) but 
> > occasionally it will drop also. 
> > I'm running beta1RC1a on an AMD 2200 athlon XP with 2gig RAM 
> > and 30gb harddrive.  I'm running in dual WAN with interface 
> > names WAN, LAN and GWAN, GLAN (xl driver)
> > I have advanced outbound NAT enabled and I have Source subnet 
> > of LAN to WAN and source subnet GLAN to WAN.  I then have 
> > rules for lan net to go out the WAN gateway and glan subnet 
> > out GWAN gateway.  
> > 
> > 
> > Am I doing something wrong here?  basically I ALWAYS want LAN 
> > to go out WAN and GLAN to go out GWAN 
> > IP's are both Static for the WAN interfaces. Let me know if 
> > any more info is needed! 
> > -Tim 
> > 
> > ____________
> > Virus checked by G DATA AntiVirusKit
> > 
> > 
> > 
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > 
> > 
> > 
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > 
> > 
> 
> ____________
> Virus checked by G DATA AntiVirusKit
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 

____________
Virus checked by G DATA AntiVirusKit


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to