Thread Info
  • State Not Answered
  • Replies 8 replies
  • Subscribers 5 subscribers
  • Views 7593 views
  • Users 0 members are here
Options
Suggested

Connections are dropped with "Could not associate packet to any connection." or "Invalid packet." several times a day for 1-3 minutes

Christian Sievers

Hi everybody,

Since EAP1 i got problems with normal connections (ips=off, no proxy, dpi=completly disabled) over the firewall.

Connections were dropped with "Could not associate packet to any connection." or "Invalid packet." in live log for http, https, ftp and maybe VPN connections (never tried any other protocol)

I can hit "reload" in browser but nothing happens.

After a minute up to 3 minutes it works again. There's nothing to find in any log but only the "Could not associate packet to any connection." message in fw-log.

Same thing happens a few times a day on different computers, but i don't know if all computers are affected at the same time, because the timeframe is to short to find out.

It's annoying. I wanna go back to 17.5.

 

Chris

(UTM and XG architect, but not happy with his XG115, even with EAP3)

Parents Reply Children
  • 0 in reply to LuCar Toni

    STAS was only used in a specific rule for another computer.

    Now:

    - disabled STAS (clearing configuration completly)

    - stopping IPS

    - stopping Hotspot

    Nothing more left to disable. Next try is replacing the XG with a simple patchcable.

     

    But: Memory use is down to 65%.

    Testing again and try to catch some packets...

  • 0 in reply to Christian Sievers

    To be sure, we would need a drop packet capture of those "real" drops to find the Root cause of this issue. 

    A tcpdumo would be nice. 

    You "could" actually write a packetfilter.log like UTM at your own, if you want to.

    Simply place following command in the background and watch your Disk Space. 

     

    drppkt > /tmp/drppkt.log & 

    Disable the command by killing it. https://linux.die.net/man/3/kill

    killall drppkt 

     

    The & will place it in background.

    Drppkt logs each packet in the log file. If your issue occurs, simply open this file with less and jump to the timeframe. 

    __________________________________________________________________________________________________________________

Unfiltered HTML