On Wed, Sep 16, 2009 at 09:36, <a_subscribti...@fiberby.dk> wrote: > It seems like its tcpdump that is causing the problem. Both machines are > running 1.2.2. One is upgraded from 1.0.1 - 1.2 - 1.2.2. The other is a > fresh install. > They were bootet 12 days ago. Just after a reboot they use app. 8% of > memory, and that has now increased to app. 50%. > > USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND > root 554 3.3 27.7 288320 286384 d0- S 4Sep09 240:11.90 > /usr/sbin/tcpdum
It very much looks like the tcpdump process generating the firewall log messages. Here the section from ps from a 1.2.1-embedded (although it's the same on 1.2.3-rc1): router:~# ps aux | grep tcpd root 450 0.0 21.7 56896 54936 d0- S 2Jan09 81:46.02 /usr/sbin/tcpdump -s 256 -v -l -n -e -ttt -i pflog0 Command line option -l activates line buffering -i t might be a memory leak in tcpdump (although it hasn't been a problem on any machine of ours). Do you have an unusually high load of connections and/or logging enabled on firewall-rules ? Tried to disable the logging of the default deny-all rule ? What is a high load of connections and how do I determine it? I haven't any logging enabled, and now I've disabled the logging of default deny rule. I'll be back with new information... Thanks Anders --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
