SSH Connection refused until I reboot.

[jbacs]

I have a Dell Poweredge 840 Server running FreeNas-11.0-U2 and it has been work fine for several months. However, lately now when trying to connect to the server via WAN it says connection refused. So, I reboot the server and it works fine again for about a day then goes right back to refusing connection. I am stumped as I didn't change anything or do anything different. I tried to find log files, but unsure where or how to do that. Any help would be appreciated.

 

[dlavigne]

Anything network related in /var/log/messages?

 

[jbacs]

Forgive me a newbie to FreeNAS here. How to I look at or in /var/log/messages? Do I type that in the shell?

 

[svtkobra7]

Forgive me a newbie to FreeNAS here. How to I look at or in /var/log/messages? Do I type that in the shell?

I'm still a n00b too, but prolly know enough to answer your question. Correct via console shell (I prefer Putty).

Code:

cd /var/log
grep -i net /var/log/messages

or

Code:

grep -i error /var/log/messages

or

Code:

less /var/log/messages

or

Code:

more -f /var/log/messages

Reference: https://www.cyberciti.biz/faq/linux-log-files-location-and-how-do-i-view-logs-files/

 

[jbacs]

Ok. Well I tried it, but forgot I just rebooted the server to get it to work again. So, this may not help, but is there anything here to give a clue. Something else I thought of. I only have 4 gigs of RAM. Would that make a difference?

[root@SFTPServer3 /var/log]# grep -i net /var/log/messages
Mar 1 15:38:17 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 1 15:38:17 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 1 15:38:17 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 1 15:38:17 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 1 15:38:17 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 1 15:38:17 SFTPServer3 freenas_sysctl: adding network.
Mar 2 12:11:51 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 2 12:11:51 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 2 12:11:51 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 2 12:11:51 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 2 12:11:51 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 2 12:11:51 SFTPServer3 freenas_sysctl: adding network.
Mar 2 14:30:41 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 2 14:30:41 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 2 14:30:41 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 2 14:30:41 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 2 14:30:41 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 2 14:30:41 SFTPServer3 freenas_sysctl: adding network.
Mar 5 17:33:51 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 5 17:33:51 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 5 17:33:51 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 5 17:33:51 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 5 17:33:51 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 5 17:33:51 SFTPServer3 freenas_sysctl: adding network.

 

[dlavigne]

Yup, that and the Realtek NIC.

 

[jbacs]

Just ordered enough to give me 8gigs of RAM since that is all they had. What NIC do you recommend?

 

[jbacs]

Oh and Thank You for your help so far. I really appreciate it.

 

[dlavigne]

Just ordered enough to give me 8gigs of RAM since that is all they had. What NIC do you recommend?

Page 18 of https://forums.freenas.org/index.php?resources/hardware-recommendations-guide.12/ has several recommendations.

 

[jbacs]

Ok. I now have 8 gigs of RAM. I checked my log files again and now I am getting the following message. What does this mean?

Mar 18 15:45:56 SFTPServer3 freenas_sysctl: adding network.
Mar 19 12:10:28 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 19 12:10:28 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 19 12:10:28 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 19 12:10:28 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 19 12:10:28 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 19 12:10:28 SFTPServer3 freenas_sysctl: adding network.
Mar 20 21:18:27 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 20 21:18:27 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 20 21:18:27 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 20 21:18:27 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 20 21:18:27 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 20 21:18:27 SFTPServer3 freenas_sysctl: adding network.
Mar 24 14:25:42 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 24 14:25:42 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 24 14:25:42 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 24 14:25:42 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 24 14:25:42 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 24 14:25:42 SFTPServer3 freenas_sysctl: adding network.
Mar 24 14:37:28 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 24 14:37:28 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 24 14:37:28 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 24 14:37:28 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 24 14:37:28 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 24 14:37:28 SFTPServer3 freenas_sysctl: adding network.
Mar 26 22:01:41 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 26 22:01:41 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 26 22:01:41 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 26 22:01:41 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 26 22:01:41 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 26 22:01:41 SFTPServer3 freenas_sysctl: adding network.
Mar 27 11:46:42 SFTPServer3 WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
Mar 27 11:46:42 SFTPServer3 bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x004101> mem 0xfe4f0000-0xfe4fffff irq
16 at device 0.0 on pci5
Mar 27 11:46:42 SFTPServer3 bge0: Ethernet address: 00:22:19:d6:e7:30
Mar 27 11:46:42 SFTPServer3 re0: <RealTek 8169/8169S/8169SB(L)/8110S/8110SB(L) Gigabit Ethernet> port 0xcc00-0xccff mem 0xfe2ffc00-0
xfe2ffcff irq 18 at device 0.0 on pci6
Mar 27 11:46:42 SFTPServer3 re0: Ethernet address: 48:02:2a:39:40:4b
Mar 27 11:46:42 SFTPServer3 freenas_sysctl: adding network.
[root@SFTPServer3 /var/log]#

 

[nojohnny101]

I'll save you the time and explain it more directly what @dlavigne was saying, get ride of that Realtek card and put in an Intel one. Really any will do and they are cheap. Read the link he supplied.

I'm saving you the time because no one is going to help you troubleshoot Realtek NICs, they are like chasing a ghost. Not worth anyone's time.

After you have put in an Intel NIC, come back if you are still having problems. Best of luck!

 

[jbacs]

I'll save you the time and explain it more directly what @dlavigne was saying, get ride of that Realtek card and put in an Intel one. Really any will do and they are cheap. Read the link he supplied.

I'm saving you the time because no one is going to help you troubleshoot Realtek NICs, they are like chasing a ghost. Not worth anyone's time.

After you have put in an Intel NIC, come back if you are still having problems. Best of luck!

Thanks Put in an intel nic card and all works fine.

 

[jbacs]

Question. Security report sent this. What does it mean?
arp: 192.168.0.105 moved from 44:39:c4:53:e1:da to a8:1e:84:33:4c:21

 

[nojohnny101]

Question. Security report sent this. What does it mean?
arp: 192.168.0.105 moved from 44:39:c4:53:e1:da to a8:1e:84:33:4c:21

If I remember correctly these are usually associated with apple devices. Do you have any apple tvs or something from apple on your network?

They are harmless, you can ignore them.

 

[DrKK]

Let me offer some more information, because we get this a lot, so I'll be more verbose and offer it for later Googlers who come across the post.

Ethernet does not use IP address, it uses MAC addresses. ARP is the protocol that handles which IP address goes with which MAC address. If you have, say, a main router, and a "wireless extender" on your network (this is a common situation), then if you suddenly go from the main router with your (say) phone to the wireless extender, that will entail a MAC address change, which will cause ARP to announce that change, since your device is now reachable via a different ethernet path, if you follow. A lot of IoT and Apple devices, as @nojohnny101 said, induce this kind of dynamics on your LAN, in addition to, like I said, range extenders.

Such ARP address changes though, in certain not-very-frequent circumstances, are also induced by certain types of hackers redirecting stuff. This is why you get such warnings.

99.78% of the time however, there is absolutely nothing to worry about when you see these messages.

Accordingly: I myself turn it off (hackers, have fun trying to get to my LAN!!) by adding the appropriate sysctls, in System->Tunables->Add Tunable->sysctl:

Code:

net.link.ether.inet.log_arp_movements=0

and, probably this related one as well:

Code:

net.link.ether.inet.log_arp_wrong_iface=0

To be clear, the "variable" is the thing to the left of the equals sign, and the "value" is 0 for each.

 

[jbacs]

Nojohnny101 and DrKK,

Thank you so much for your reply. This particular data center is part of a city and some of the staff have apple iphones and devices that connect between the wireless on the router and two other wireless access points in the building. I know very little about apple devices, but now that I know I will ignore the messages. Thanks again.

 

[DrKK]

Nojohnny101 and DrKK,

Thank you so much for your reply. This particular data center is part of a city and some of the staff have apple iphones and devices that connect between the wireless on the router and two other wireless access points in the building. I know very little about apple devices, but now that I know I will ignore the messages. Thanks again.

It is my pleasure to assist you sir, despite the fact that you are in Oregon.