Suricata in non blocking mode
Completely forgotten today is a holiday here, so the Log (Part1/2):
Mar 29 10:59:19 php-fpm[82809]: /interfaces.php: Configuration Change: admin@192.168.xxx.xxx (Local Database): Interfaces settings changed
Mar 29 10:59:19 check_reload_status[433]: Syncing firewall
Mar 29 10:59:21 check_reload_status[433]: Linkup starting em1
Mar 29 10:59:21 kernel: em1: link state changed to DOWN
Mar 29 10:59:22 php-fpm[394]: /rc.linkup: Hotplug event detected for WAN(wan) dynamic IP address (4: dhcp)
Mar 29 10:59:22 php-fpm[394]: /rc.linkup: DEVD Ethernet detached event for wan
Mar 29 10:59:22 rc.gateway_alarm[55196]: >>> Gateway alarm: WAN_DHCP (Addr: Alarm:down RTT:0ms RTTsd:0ms Loss:100%)
Mar 29 10:59:22 check_reload_status[433]: updating dyndns WAN_DHCP
Mar 29 10:59:22 check_reload_status[433]: Restarting IPsec tunnels
Mar 29 10:59:22 check_reload_status[433]: Restarting OpenVPN tunnels/interfaces
Mar 29 10:59:22 check_reload_status[433]: Reloading filter
Mar 29 10:59:24 php-fpm[86993]: /rc.openvpn: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 10:59:24 check_reload_status[433]: Linkup starting em1
Mar 29 10:59:24 kernel: em1: link state changed to UP
Mar 29 10:59:27 check_reload_status[433]: rc.newwanip starting em1
Mar 29 10:59:27 php-fpm[393]: /interfaces.php: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 10:59:27 check_reload_status[433]: Restarting IPsec tunnels
Mar 29 10:59:28 php-fpm[97591]: /rc.newwanip: rc.newwanip: Info: starting on em1.
Mar 29 10:59:28 php-fpm[97591]: /rc.newwanip: rc.newwanip: on (IP address: 192.168.xxx.xxx) (interface: WAN[wan]) (real interface: em1).
Mar 29 10:59:32 php-fpm[97591]: /rc.newwanip: Removing static route for monitor xxx.xxx.xxx.xxx and adding a new route through 192.168.xxx.xxx
Mar 29 10:59:34 check_reload_status[433]: Reloading filter
Mar 29 10:59:34 php-fpm[86993]: /rc.linkup: Hotplug event detected for WAN(wan) dynamic IP address (4: dhcp)
Mar 29 10:59:34 php-fpm[86993]: /rc.linkup: DEVD Ethernet attached event for wan
Mar 29 10:59:34 php-fpm[86993]: /rc.linkup: HOTPLUG: Configuring interface wan
Mar 29 10:59:34 kernel: em1: link state changed to DOWN
Mar 29 10:59:34 check_reload_status[433]: Linkup starting em1
Mar 29 10:59:35 php-fpm[97591]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:35 php-fpm[97591]: /rc.newwanip: Default gateway setting Interface WAN_DHCP Gateway as default.
Mar 29 10:59:35 php-fpm[97591]: /rc.newwanip: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 10:59:35 php-fpm[97591]: /rc.newwanip: IP Address has changed, killing states on former IP Address 0.0.0.0.
Mar 29 10:59:35 php-fpm[393]: /interfaces.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:37 check_reload_status[433]: Linkup starting em1
Mar 29 10:59:37 kernel: em1: link state changed to UP
Mar 29 10:59:37 php-fpm[36554]: /widgets/widgets/gateways.widget.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:38 php-fpm[393]: /interfaces.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:39 php-fpm[394]: /rc.filter_configure_sync: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:40 check_reload_status[433]: rc.newwanip starting em1
Mar 29 10:59:41 php-fpm[82809]: /rc.newwanip: rc.newwanip: Info: starting on em1.
Mar 29 10:59:41 php-fpm[82809]: /rc.newwanip: rc.newwanip: on (IP address: 192.168.xxx.xxx) (interface: WAN[wan]) (real interface: em1).
Mar 29 10:59:42 php-fpm[393]: /interfaces.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:43 php-fpm[394]: /rc.filter_configure_sync: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:43 php-fpm[86993]: /rc.linkup: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:43 php-fpm[86993]: /rc.linkup: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 10:59:43 check_reload_status[433]: Restarting IPsec tunnels
Mar 29 10:59:46 php-fpm[393]: /interfaces.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:49 php-fpm[393]: /interfaces.php: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1711706389] unbound[68849:0] error: bind: address already in use [1711706389] unbound[68849:0] fatal error: could not open ports'
Mar 29 10:59:50 check_reload_status[433]: updating dyndns wan
Mar 29 10:59:54 php-fpm[82809]: /rc.newwanip: Removing static route for monitor xxx.xxx.xxx.xxx and adding a new route through 192.168.xxx.xxx
Mar 29 10:59:58 php-fpm[82809]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:58 php-fpm[82809]: /rc.newwanip: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 10:59:58 php-fpm[82809]: /rc.newwanip: IP Address has changed, killing states on former IP Address 0.0.0.0.
Mar 29 10:59:59 php-fpm[86993]: /rc.linkup: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:59 php-fpm[97591]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 10:59:59 php-fpm[393]: /interfaces.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:00 php[69011]: [pfBlockerNG] Starting cron process.
Mar 29 11:00:00 php-cgi[70512]: servicewatchdog_cron.php: Service Watchdog detected service unbound stopped. Restarting unbound (DNS Resolver)
Mar 29 11:00:02 php-fpm[394]: /rc.dyndns.update: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:03 php-fpm[86993]: /rc.linkup: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:03 php-fpm[97591]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:03 php-fpm[393]: /interfaces.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:04 php[69011]: [pfBlockerNG] No changes to Firewall rules, skipping Filter Reload
Mar 29 11:00:04 php-cgi[70840]: rc.filter_configure_sync: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:04 php-fpm[82809]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:05 php-fpm[63073]: /widgets/widgets/gateways.widget.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:06 php-fpm[86993]: /rc.linkup: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:06 php-cgi[70512]: servicewatchdog_cron.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:06 php-fpm[97591]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:07 php-fpm[393]: /interfaces.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:07 php-cgi[70840]: rc.filter_configure_sync: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:08 php-fpm[82809]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:10 php-fpm[86993]: /rc.linkup: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:10 php-cgi[70512]: servicewatchdog_cron.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:10 php-fpm[97591]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:10 php-fpm[393]: /interfaces.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:11 php-fpm[82809]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:00:19 php-fpm[393]: /interfaces.php: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1711706419] unbound[3007:0] error: bind: address already in use [1711706419] unbound[3007:0] fatal error: could not open ports'
Mar 29 11:00:19 php-fpm[97591]: /rc.newwanip: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1711706419] unbound[89726:0] error: bind: address already in use [1711706419] unbound[89726:0] fatal error: could not open ports'
Mar 29 11:00:20 php-fpm[82809]: /rc.newwanip: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1711706420] unbound[3633:0] error: bind: address already in use [1711706420] unbound[3633:0] fatal error: could not open ports'
Mar 29 11:00:20 php-cgi[70512]: servicewatchdog_cron.php: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1711706420] unbound[38652:0] error: bind: address already in use [1711706420] unbound[38652:0] fatal error: could not open ports'
Mar 29 11:00:22 php-fpm[393]: /interfaces.php: Resyncing OpenVPN instances for interface WAN.
Mar 29 11:00:22 php-fpm[393]: /interfaces.php: Removing static route for monitor xxx.xxx.xxx and adding a new route through 192.168.xxx.xxx
Mar 29 11:00:22 check_reload_status[433]: Reloading filter
Mar 29 11:00:23 php-fpm[393]: /interfaces.php: Creating rrd update script
Mar 29 11:00:23 check_reload_status[433]: Starting packages
Mar 29 11:00:23 check_reload_status[433]: updating dyndns wan
Mar 29 11:00:23 check_reload_status[433]: Reloading filter
Mar 29 11:00:23 php-fpm[18930]: /rc.linkup: Hotplug event detected for WAN(wan) dynamic IP address (4: dhcp)
Mar 29 11:00:23 php-fpm[18930]: /rc.linkup: DEVD Ethernet detached event for wan
Mar 29 11:00:24 php-fpm[63073]: /rc.start_packages: Restarting/Starting all packages.
Mar 29 11:00:24 php-fpm[394]: /rc.filter_configure_sync: dpinger: status socket /var/run/dpinger_WAN_DHCP~192.168.xxx.xxx~xxx.xxx.xxx.xxx.sock not found
Mar 29 11:00:24 php-fpm[86993]: /rc.dyndns.update: dpinger: status socket /var/run/dpinger_WAN_DHCP~192.168.xxx.xxx~xxx.xxx.xxx.xxx.sock not found
Mar 29 11:00:24 php-fpm[393]: /widgets/widgets/gateways.widget.php: dpinger: status socket /var/run/dpinger_WAN_DHCP~192.168.xxx.xxx~xxx.xxx.xxx.xxx.sock not found
Mar 29 11:00:24 rc.gateway_alarm[77855]: >>> Gateway alarm: WAN_DHCP (Addr:192.168.xxx.xxx Alarm:down RTT:0ms RTTsd:0ms Loss:100%)
Mar 29 11:00:24 check_reload_status[433]: updating dyndns WAN_DHCP
Mar 29 11:00:24 check_reload_status[433]: Restarting IPsec tunnels
Mar 29 11:00:24 check_reload_status[433]: Restarting OpenVPN tunnels/interfaces
Mar 29 11:00:24 check_reload_status[433]: Reloading filter
Mar 29 11:00:26 php-cgi[70512]: servicewatchdog_cron.php: Service Watchdog detected service dpinger stopped. Restarting dpinger (Gateway Monitoring Daemon)
Mar 29 11:00:28 php-fpm[393]: /rc.openvpn: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 11:00:37 php-cgi[70512]: servicewatchdog_cron.php: The command '/usr/local/bin/dpinger -S -r 0 -i WAN_DHCP -B 192.168.xxx.xxx -p /var/run/dpinger_WAN_DHCP~192.168.xxx.xxx~xxx.xxx.xxx.xxx.pid -u /var/run/dpinger_WAN_DHCP~192.168.xxx.xxx~xxx.xxx.xxx.xxx.sock -C "/etc/rc.gateway_alarm" -d 1 -s 15000 -l 2000 -t 60000 -A 30000 -D 500 -L 20 xxx.xxx.xxx.xxx >/dev/null' returned exit code '1', the output was ''
Mar 29 11:00:37 php-cgi[70512]: servicewatchdog_cron.php: Error starting gateway monitor for WAN_DHCP
Mar 29 11:00:41 bandwidthd[50037]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:00:41 bandwidthd[50037]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:00:41 bandwidthd[50037]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:00:41 bandwidthd[50197]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:00:41 bandwidthd[50197]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:00:41 bandwidthd[50197]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:00:41 bandwidthd[51006]: Recovering from log.1.2.cdf
Mar 29 11:00:41 bandwidthd[51246]: Recovering from log.2.0.cdf
Mar 29 11:00:41 bandwidthd[51345]: Recovering from log.3.0.cdf
Mar 29 11:00:41 bandwidthd[51650]: Recovering from log.4.0.cdf
Mar 29 11:00:41 bandwidthd[55014]: Recovering from log.2.0.cdf
Mar 29 11:00:41 bandwidthd[51889]: Recovering from log.1.2.cdf
Mar 29 11:00:41 bandwidthd[55271]: Recovering from log.3.0.cdf
Mar 29 11:00:41 bandwidthd[55302]: Recovering from log.4.0.cdf
Mar 29 11:00:41 bandwidthd[55302]: Finished recovering 5224 records
Mar 29 11:00:41 bandwidthd[55302]: Opening re1
Mar 29 11:00:41 bandwidthd[55302]: Packet Encoding: Ethernet
Mar 29 11:00:41 bandwidthd[55302]: Drawing initial graphs
Mar 29 11:00:41 bandwidthd[51650]: Finished recovering 5224 records
Mar 29 11:00:41 bandwidthd[51650]: Opening re1
Mar 29 11:00:41 bandwidthd[51650]: Packet Encoding: Ethernet
Mar 29 11:00:41 bandwidthd[51650]: Drawing initial graphs
Mar 29 11:00:41 bandwidthd[51006]: Finished recovering 16510 records
Mar 29 11:00:41 bandwidthd[51889]: Finished recovering 16510 records
Mar 29 11:00:41 bandwidthd[51006]: Recovering from log.1.1.cdf
Mar 29 11:00:41 bandwidthd[51889]: Recovering from log.1.1.cdf
Mar 29 11:00:41 bandwidthd[51889]: Finished recovering 15184 records
Mar 29 11:00:41 bandwidthd[51889]: Recovering from log.1.0.cdf
Mar 29 11:00:41 bandwidthd[51006]: Finished recovering 15184 records
Mar 29 11:00:41 bandwidthd[51889]: Finished recovering 6624 records
Mar 29 11:00:41 bandwidthd[51889]: Opening re1
Mar 29 11:00:41 bandwidthd[51006]: Recovering from log.1.0.cdf
Mar 29 11:00:41 bandwidthd[51889]: Packet Encoding: Ethernet
Mar 29 11:00:41 bandwidthd[51889]: Drawing initial graphs
Mar 29 11:00:41 bandwidthd[51006]: Finished recovering 6624 records
Mar 29 11:00:42 bandwidthd[51006]: Opening re1
Mar 29 11:00:42 bandwidthd[51006]: Packet Encoding: Ethernet
Mar 29 11:00:42 bandwidthd[51006]: Drawing initial graphs
Mar 29 11:00:42 bandwidthd[51345]: Finished recovering 119912 records
Mar 29 11:00:42 bandwidthd[51345]: Opening re1
Mar 29 11:00:42 bandwidthd[51345]: Packet Encoding: Ethernet
Mar 29 11:00:42 bandwidthd[51345]: Drawing initial graphs
Mar 29 11:00:42 bandwidthd[51246]: Finished recovering 166949 records
Mar 29 11:00:42 bandwidthd[51246]: Failed to parse part of log file. Giving up on the file
Mar 29 11:00:42 bandwidthd[51246]: Opening re1
Mar 29 11:00:42 bandwidthd[51246]: Packet Encoding: Ethernet
Mar 29 11:00:42 bandwidthd[51246]: Drawing initial graphs
Mar 29 11:00:42 php-fpm[63073]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s).
Mar 29 11:00:42 check_reload_status[433]: Syncing firewall
Mar 29 11:00:42 php-fpm[63073]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s).
Mar 29 11:00:42 bandwidthd[55271]: Finished recovering 119912 records
Mar 29 11:00:42 bandwidthd[55271]: Opening re1
Mar 29 11:00:42 bandwidthd[55271]: Packet Encoding: Ethernet
Mar 29 11:00:42 bandwidthd[55271]: Drawing initial graphs
Mar 29 11:00:43 check_reload_status[433]: Syncing firewall
Mar 29 11:00:43 bandwidthd[55014]: Finished recovering 166949 records
Mar 29 11:00:43 bandwidthd[55014]: Failed to parse part of log file. Giving up on the file
Mar 29 11:00:43 bandwidthd[55014]: Opening re1
Mar 29 11:00:43 bandwidthd[55014]: Packet Encoding: Ethernet
Mar 29 11:00:43 bandwidthd[55014]: Drawing initial graphs
Mar 29 11:00:43 php-fpm[63073]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard).
Mar 29 11:00:43 php-fpm[63073]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard).
Mar 29 11:00:43 php-fpm[63073]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard).
Mar 29 11:00:43 php-fpm[63073]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard).
Mar 29 11:00:43 php-fpm[63073]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary.
Mar 29 11:00:43 kernel: em0: promiscuous mode disabled
Mar 29 11:00:43 kernel: re0.10: promiscuous mode disabled
Mar 29 11:00:43 kernel: re0: promiscuous mode disabled
Mar 29 11:00:43 kernel: re0.20: promiscuous mode disabled
Mar 29 11:00:43 kernel: re0: promiscuous mode enabled
Mar 29 11:00:43 kernel: em0: promiscuous mode enabled
Mar 29 11:00:43 kernel: re0.10: promiscuous mode enabled
Mar 29 11:00:43 kernel: re0.20: promiscuous mode enabled
Mar 29 11:00:43 vnstatd[96792]: Error: pidfile "/var/run/vnstat/vnstat.pid" lock failed (Resource temporarily unavailable), exiting.
Mar 29 11:00:44 arpwatch[82832]: listening on re1
Mar 29 11:00:44 arpwatch[83279]: listening on em0
Mar 29 11:00:44 arpwatch[83004]: listening on re0
Mar 29 11:00:44 arpwatch[83388]: listening on re0.10
Mar 29 11:00:44 arpwatch[83684]: listening on re0.20
Mar 29 11:00:44 php-fpm[97591]: /rc.newwanip: Resyncing OpenVPN instances for interface WAN.
Mar 29 11:00:44 php-fpm[97591]: /rc.newwanip: Creating rrd update script
Mar 29 11:00:45 php-fpm[82809]: /rc.newwanip: Resyncing OpenVPN instances for interface WAN.
Mar 29 11:00:45 php-fpm[82809]: /rc.newwanip: Creating rrd update script
Mar 29 11:00:46 php-fpm[97591]: /rc.newwanip: pfSense package system has detected an IP change or dynamic WAN reconnection - 0.0.0.0 -> 192.168.xxx.xxx - Restarting packages.
Mar 29 11:00:46 check_reload_status[433]: Starting packages
Mar 29 11:00:46 check_reload_status[433]: Reloading filter
Mar 29 11:00:47 php-fpm[82809]: /rc.newwanip: pfSense package system has detected an IP change or dynamic WAN reconnection - 0.0.0.0 -> 192.168.xxx.xxx - Restarting packages.
Mar 29 11:00:47 check_reload_status[433]: Starting packages
Mar 29 11:00:47 check_reload_status[433]: Reloading filter
Mar 29 11:00:47 php-fpm[36554]: /rc.linkup: Hotplug event detected for WAN(wan) dynamic IP address (4: dhcp)
Mar 29 11:00:47 php-fpm[36554]: /rc.linkup: DEVD Ethernet attached event for wan
Mar 29 11:00:47 php-fpm[36554]: /rc.linkup: HOTPLUG: Configuring interface wan
Mar 29 11:00:47 check_reload_status[433]: Linkup starting em1
Mar 29 11:00:47 kernel: em1: link state changed to DOWN
Mar 29 11:00:48 php-fpm[86993]: /rc.start_packages: Skipping STARTing packages process because previous/another instance is already running
Mar 29 11:00:48 php-fpm[82809]: /rc.start_packages: Skipping STARTing packages process because previous/another instance is already running
Mar 29 11:00:50 check_reload_status[433]: Linkup starting em1
Mar 29 11:00:50 kernel: em1: link state changed to UP
Mar 29 11:00:51 check_reload_status[433]: rc.newwanip starting em1
Mar 29 11:00:51 php-fpm[36554]: /rc.linkup: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 11:00:51 check_reload_status[433]: Restarting IPsec tunnels
Mar 29 11:00:52 php-fpm[393]: /rc.newwanip: rc.newwanip: Info: starting on em1.
Mar 29 11:00:52 php-fpm[393]: /rc.newwanip: rc.newwanip: on (IP address: 192.168.xxx.xxx) (interface: WAN[wan]) (real interface: em1).
Mar 29 11:00:54 vnstatd[1916]: SIGTERM received, exiting.
Mar 29 11:00:54 tail_pfb[93517]: [pfBlockerNG] Firewall Filter Service stopped
Mar 29 11:00:54 php_pfb[94573]: [pfBlockerNG] filterlog daemon stopped
Mar 29 11:00:54 lighttpd_pfb[95065]: [pfBlockerNG] DNSBL Webserver stopped
Mar 29 11:00:54 lighttpd_pfb[97076]: [pfBlockerNG] DNSBL Webserver started
Mar 29 11:00:54 vnstatd[98295]: vnStat daemon 2.11 (pid:98295 uid:0 gid:0, SQLite 3.43.1)
Mar 29 11:00:54 vnstatd[98295]: Data retention: 48 5MinuteHours, 4 HourlyDays, 62 DailyDays, 25 MonthlyMonths, -1 YearlyYears, 20 TopDayEntries
Mar 29 11:00:54 vnstatd[98295]: Monitoring (9): re1 (1000 Mbit) re0.20 (1000 Mbit) re0.10 (1000 Mbit) re0 (1000 Mbit) pfsync0 (1000 Mbit) pflog0 (1000 Mbit) enc0 (1000 Mbit) em1 (1000 Mbit) em0 (100 Mbit)
Mar 29 11:00:54 tail_pfb[7]: [pfBlockerNG] Firewall Filter Service started
Mar 29 11:00:54 vnstatd[98922]: Error: pidfile "/var/run/vnstat/vnstat.pid" lock failed (Resource temporarily unavailable), exiting.
Mar 29 11:00:54 php_pfb[460]: [pfBlockerNG] filterlog daemon started
Mar 29 11:00:54 php[97869]: [pfBlockerNG] DNSBL parser daemon started
Mar 29 11:01:00 php-cgi[15978]: servicewatchdog_cron.php: Service Watchdog detected service dpinger stopped. Restarting dpinger (Gateway Monitoring Daemon)
Mar 29 11:01:00 php-cgi[15978]: servicewatchdog_cron.php: Suppressing repeat e-mail notification message.
Mar 29 11:01:09 php-fpm[393]: /rc.newwanip: Removing static route for monitor xxx.xxx.xxx.xxx and adding a new route through 192.168.xxx.xxx
Mar 29 11:01:11 php-cgi[15978]: servicewatchdog_cron.php: Removing static route for monitor xxx.xxx.xxx.xxx and adding a new route through 192.168.xxx.xxx
Mar 29 11:01:13 php-fpm[393]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:01:13 php-fpm[393]: /rc.newwanip: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 11:01:13 php-fpm[393]: /rc.newwanip: IP Address has changed, killing states on former IP Address 0.0.0.0.
Mar 29 11:01:17 suricata[33077]: [1:2210054:1] SURICATA STREAM excessive retransmissions [Classification: Generic Protocol Command Decode] [Priority: 3] {TCP} 192.168.xxx.xxx:34238 -> 212.227.xxx.xxx:993
Mar 29 11:01:18 suricata[33077]: [1:2210054:1] SURICATA STREAM excessive retransmissions [Classification: Generic Protocol Command Decode] [Priority: 3] {TCP} 192.168.xxx.xxx:48823 -> 212.227.xxx.xxx:993
Mar 29 11:01:19 php-fpm[393]: /rc.newwanip: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exit code '1', the output was '[1711706479] unbound[99703:0] error: bind: address already in use [1711706479] unbound[99703:0] fatal error: could not open ports'
Mar 29 11:01:26 check_reload_status[433]: updating dyndns wan
Mar 29 11:01:26 check_reload_status[433]: Reloading filter
Mar 29 11:01:26 php-fpm[394]: /rc.linkup: Hotplug event detected for WAN(wan) dynamic IP address (4: dhcp)
Mar 29 11:01:26 php-fpm[394]: /rc.linkup: DEVD Ethernet detached event for wan
Mar 29 11:01:27 rc.gateway_alarm[7691]: >>> Gateway alarm: WAN_DHCP (Addr:192.168.xxx.xxx Alarm:down RTT:0ms RTTsd:0ms Loss:100%)
Mar 29 11:01:27 check_reload_status[433]: updating dyndns WAN_DHCP
Mar 29 11:01:27 check_reload_status[433]: Restarting IPsec tunnels
Mar 29 11:01:27 check_reload_status[433]: Restarting OpenVPN tunnels/interfaces
Mar 29 11:01:27 check_reload_status[433]: Reloading filter
Mar 29 11:01:29 php-fpm[97591]: /rc.openvpn: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 11:01:42 check_reload_status[433]: Reloading filter
Mar 29 11:01:42 php-fpm[18930]: /rc.linkup: Hotplug event detected for WAN(wan) dynamic IP address (4: dhcp)
Mar 29 11:01:42 php-fpm[18930]: /rc.linkup: DEVD Ethernet attached event for wan
Mar 29 11:01:42 php-fpm[18930]: /rc.linkup: HOTPLUG: Configuring interface wan
Mar 29 11:01:43 kernel: em1: link state changed to DOWN
Mar 29 11:01:43 check_reload_status[433]: Linkup starting em1
Mar 29 11:01:45 check_reload_status[433]: Linkup starting em1
Mar 29 11:01:45 kernel: em1: link state changed to UP
Mar 29 11:01:46 check_reload_status[433]: rc.newwanip starting em1
Mar 29 11:01:46 php-fpm[18930]: /rc.linkup: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 11:01:46 check_reload_status[433]: Restarting IPsec tunnels
Mar 29 11:01:47 php-fpm[394]: /rc.newwanip: rc.newwanip: Info: starting on em1.
Mar 29 11:01:47 php-fpm[394]: /rc.newwanip: rc.newwanip: on (IP address: 192.168.xxx.xxx) (interface: WAN[wan]) (real interface: em1).
Mar 29 11:01:58 php-fpm[393]: /rc.newwanip: Resyncing OpenVPN instances for interface WAN.
Mar 29 11:01:58 php-fpm[393]: /rc.newwanip: Creating rrd update script
Mar 29 11:02:00 php-fpm[393]: /rc.newwanip: pfSense package system has detected an IP change or dynamic WAN reconnection - 0.0.0.0 -> 192.168.xxx.xxx - Restarting packages.
Mar 29 11:02:00 check_reload_status[433]: Starting packages
Mar 29 11:02:00 check_reload_status[433]: Reloading filter
Mar 29 11:02:00 php-cgi[2020]: servicewatchdog_cron.php: Service Watchdog detected service unbound stopped. Restarting unbound (DNS Resolver)
Mar 29 11:02:01 php-fpm[393]: /rc.start_packages: Restarting/Starting all packages.
Mar 29 11:02:02 php-fpm[394]: /rc.newwanip: Removing static route for monitor xxx.xxx.xxx.xxx and adding a new route through 192.168.xxx.xxx
Mar 29 11:02:04 bandwidthd[35420]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:02:04 bandwidthd[35420]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:02:04 bandwidthd[35420]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:02:04 bandwidthd[35420]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:02:04 bandwidthd[35591]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:02:04 bandwidthd[35591]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:02:04 bandwidthd[35591]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:02:04 bandwidthd[35591]: Monitoring subnet 192.168.xxx.xxx with netmask 255.255.255.0
Mar 29 11:02:04 bandwidthd[43111]: Recovering from log.1.2.cdf
Mar 29 11:02:04 bandwidthd[43979]: Recovering from log.4.0.cdf
Mar 29 11:02:04 bandwidthd[44701]: Recovering from log.1.2.cdf
Mar 29 11:02:04 bandwidthd[43453]: Recovering from log.2.0.cdf
Mar 29 11:02:04 bandwidthd[45276]: Recovering from log.2.0.cdf
Mar 29 11:02:04 bandwidthd[45795]: Recovering from log.4.0.cdf
Mar 29 11:02:04 bandwidthd[43745]: Recovering from log.3.0.cdf
Mar 29 11:02:04 bandwidthd[43111]: Finished recovering 16510 records
Mar 29 11:02:04 bandwidthd[45453]: Recovering from log.3.0.cdf
Mar 29 11:02:04 bandwidthd[43111]: Recovering from log.1.1.cdf
Mar 29 11:02:04 bandwidthd[44701]: Finished recovering 16510 records
Mar 29 11:02:04 bandwidthd[44701]: Recovering from log.1.1.cdf
Mar 29 11:02:04 bandwidthd[45795]: Finished recovering 5224 records
Mar 29 11:02:04 bandwidthd[43979]: Finished recovering 5224 records
Mar 29 11:02:04 bandwidthd[43979]: Opening re1
Mar 29 11:02:04 bandwidthd[45795]: Opening re1
Mar 29 11:02:04 bandwidthd[43979]: Packet Encoding: Ethernet
Mar 29 11:02:04 bandwidthd[45795]: Packet Encoding: Ethernet
Mar 29 11:02:04 bandwidthd[43979]: Drawing initial graphs
Mar 29 11:02:04 bandwidthd[44701]: Finished recovering 15184 records
Mar 29 11:02:04 bandwidthd[45795]: Drawing initial graphs
Mar 29 11:02:04 bandwidthd[44701]: Recovering from log.1.0.cdf
Mar 29 11:02:04 bandwidthd[43111]: Finished recovering 15184 records
Mar 29 11:02:04 bandwidthd[43111]: Recovering from log.1.0.cdf
Mar 29 11:02:05 bandwidthd[44701]: Finished recovering 6624 records
Mar 29 11:02:05 bandwidthd[43111]: Finished recovering 6624 records
Mar 29 11:02:05 bandwidthd[43111]: Opening re1
Mar 29 11:02:05 bandwidthd[43111]: Packet Encoding: Ethernet
Mar 29 11:02:05 bandwidthd[43111]: Drawing initial graphs
Mar 29 11:02:05 bandwidthd[44701]: Opening re1
Mar 29 11:02:05 bandwidthd[44701]: Packet Encoding: Ethernet
Mar 29 11:02:05 bandwidthd[44701]: Drawing initial graphs
Mar 29 11:02:05 bandwidthd[45276]: Finished recovering 166949 records
Mar 29 11:02:05 bandwidthd[43453]: Finished recovering 166949 records
Mar 29 11:02:05 bandwidthd[45453]: Finished recovering 119912 records
Mar 29 11:02:05 bandwidthd[45276]: Failed to parse part of log file. Giving up on the file
Mar 29 11:02:05 bandwidthd[45453]: Opening re1
Mar 29 11:02:05 bandwidthd[45276]: Opening re1
Mar 29 11:02:05 bandwidthd[45453]: Packet Encoding: Ethernet
Mar 29 11:02:05 bandwidthd[45276]: Packet Encoding: Ethernet
Mar 29 11:02:05 bandwidthd[45453]: Drawing initial graphs
Mar 29 11:02:05 bandwidthd[45276]: Drawing initial graphs
Mar 29 11:02:05 bandwidthd[43453]: Failed to parse part of log file. Giving up on the file
Mar 29 11:02:05 bandwidthd[43453]: Opening re1
Mar 29 11:02:05 bandwidthd[43453]: Packet Encoding: Ethernet
Mar 29 11:02:05 bandwidthd[43453]: Drawing initial graphs
Mar 29 11:02:05 bandwidthd[43745]: Finished recovering 119912 records
Mar 29 11:02:05 bandwidthd[43745]: Opening re1
Mar 29 11:02:05 bandwidthd[43745]: Packet Encoding: Ethernet
Mar 29 11:02:05 bandwidthd[43745]: Drawing initial graphs
Mar 29 11:02:06 php-fpm[394]: /rc.newwanip: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:02:06 php-fpm[394]: /rc.newwanip: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.PROTO.>'' returned exit code '1', the output was ''
Mar 29 11:02:06 php-fpm[394]: /rc.newwanip: IP Address has changed, killing states on former IP Address 0.0.0.0.
Mar 29 11:02:06 php-fpm[393]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s).
Mar 29 11:02:06 check_reload_status[433]: Syncing firewall
Mar 29 11:02:06 php-fpm[97591]: /rc.filter_configure_sync: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:02:06 php-fpm[393]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s).
Mar 29 11:02:06 check_reload_status[433]: Syncing firewall
Mar 29 11:02:06 php-fpm[393]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard).
Mar 29 11:02:06 php-fpm[18930]: /rc.linkup: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:02:06 php-fpm[393]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard).
Mar 29 11:02:07 php-fpm[63073]: /rc.dyndns.update: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:02:07 arpwatch[36732]: listening on re1
Mar 29 11:02:07 arpwatch[37082]: listening on re0
Mar 29 11:02:07 arpwatch[37710]: listening on em0
Mar 29 11:02:07 arpwatch[38485]: listening on re0.10
Mar 29 11:02:07 arpwatch[39767]: listening on re0.20
Mar 29 11:02:07 php-fpm[393]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard).
Mar 29 11:02:07 php-fpm[393]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard).
Mar 29 11:02:07 check_reload_status[433]: Syncing firewall
Mar 29 11:02:07 php-cgi[2020]: servicewatchdog_cron.php: dpinger: timeout while retrieving status for gateway WAN_DHCP
Mar 29 11:02:08 php-fpm[393]: /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary.
Mar 29 11:02:08 vnstatd[55280]: Error: pidfile "/var/run/vnstat/vnstat.pid" lock failed (Resource temporarily unavailable), exiting.
Mar 29 11:02:09 php-fpm[86993]: /widgets/widgets/gateways.widget.php: dpinger: timeout while retrieving status for gateway WAN_DHCP