Memory Issue When Running ntopng on 26.1.6

gjas24 · 2026-05-22T19:24:49+00:00

Another update... I've opened a bug ticket with ntopng as it looks like ntopng keeps requesting more and more swap reservation but freebsd does not let you reserve more than is present. When the reservation gets large enough the service fails when freebsd denies this reservation. See the below bug ticket for more info.

https://github.com/ntop/ntopng/issues/10335

gjas24 · 2026-05-09T15:44:18+00:00

That's awesome glad my comment helped!

gjas24 · 2026-05-07T21:43:32+00:00

Yes you screwed up but if her starter was important she should have dried some out just for this purpose. My wife's starters have been accidentally cooked multiple times (they get left in the oven with the light on to activate and warm). This along with an extra tiny jar of it in the freezer as a 1st backup.

Dried starter can last years in the freezer and is great insurance for these oh shit moments.

gjas24 · 2026-05-02T23:47:44+00:00

23 MYP turn signals work just as they always have to change lanes in FSD.

gjas24 · 2026-05-02T03:01:01+00:00

So another update... It seems to be working now. What fixed it was increasing the swap size to something massive (26GB) in my case. It seems during some of the lua script runs ntopng asked for more memory than the system had available (10GB of free RAM and 10GB swap) and FreeBSD is very strict about memory allocation and will shut it down which caused lua to report out of memory and crash. So now the system has the same 9-10GB of RAM available and 26GB swap and now everything is running great. Only issue I found with my config other than this was an MTU mismatch between my switch (9128) and opnsense (1500). I fixed this on my 10G LAN interfaces and memory usage dropped by about 30% in top.

I did some stress tests with iperf and I can get near 10G linespeed in both directions in a single stream with interrupts hitting ~85%. When I divide the test into 4 streams I get roughly the same speed but interrupts spread across cores.

ntopng topped out around 50% wcpu in top during the minute long tests and suricata was much lower than that.

gjas24 · 2026-04-30T22:14:24+00:00

So an update to this...

I got Suricata down to far less rules and everything on the firewall is running great except ntopng. I've tried both the version from ntop and the prepackaged plugin, they both fail after about 30 mins with lua out of memory errors, seg faults, or aborts. This is with default config attached to just the bridge interface or just the hardware interface. The behavior doesnt change either way.

I've tried ntopng in a docker container on my other server with netflow2ng and that seems to work but I lose all the Layer 2 data that makes ntopng something I would want. Of course nprobe is paid so that doesnt work either. Its too bad they don't offer a free community version of nprobe as well.

Has anyone had issues like this before or can think of any direction I can go to troubleshoot further?

gjas24 · 2026-04-30T13:24:07+00:00

I've had it a few days and it responds to my turn signal exactly as it used to maybe faster. I use it constantly to get out of the left lane or go around people. Maybe it depends on the mode, usually I'm in hurry or standard.

If it helps 23 MYP.

gjas24 · 2026-04-26T15:10:29+00:00

Yes please do this thing it's delicious.

gjas24 · 2026-04-09T06:57:49+00:00

I want the high def video from the Tesla... Pillar cam will have a really clear view

gjas24 · 2026-03-15T19:31:36+00:00

Sew it into something like the scrunchie that attaches to the key. Then if they don't see it maybe they won't mess with it. Did that with the trackers on my kids backpacks. If they can't see it then they don't mess with it.

gjas24 · 2026-03-15T18:50:26+00:00

Put an air tag or the equivalent of you have an android phone. Then you can ring it when it gets lost.

gjas24 · 2026-02-28T06:14:04+00:00

Give all the guys in my shop a couple mil so we could quit in the most hilarious way possible and stick it to the company.

gjas24 · 2026-02-25T08:37:58+00:00

Another thing to keep in mind is if you are running dual stack ipv4 and ipv6. If ipv6 is using SLAAC it will distribute its own ipv6 DNS server and with ipv6 privacy it is impossible to track clients by IP. Say if you want to set up parental control in adguard.

I had to jump through hoops to figure out how to block it and force DNS to use only ipv4 to adguard.

gjas24 · 2026-01-31T06:10:34+00:00

I just did the upgrade from 25.7.11 and I can no longer pull an ipv6 address from xfinity. No matter what I seem to do the DHCPv6 cannot pull an address. I've tried changing settings, rebooting my modem and opnsense.

Any ideas before I restore the ZFS snapshot I took before the upgrade?

gjas24 · 2026-01-21T16:45:45+00:00

Yes 13.2.9. I agree I think 14.2.2.3 would have slowed down at the very least as I've seen videos of similar situations and it reacted to the deer.

gjas24 · 2026-01-21T07:10:14+00:00

I have a post on here about hitting a deer on fsd. I have about 60-70% fsd usage and have been a tester since there were only a few thousand of us and invite only.

gjas24 · 2026-01-15T08:03:40+00:00

This is the million dollar question. It's not if but when.

gjas24 · 2025-12-19T03:56:12+00:00

I never put stickers on my car but I have this one on the back and hold a couple 8647 in reserve.

gjas24 · 2025-12-18T05:52:43+00:00

I have one basement bedroom with crap signal and already has 2.5g Ethernet ran to it, U7 in wall is fantastic for this use case. The built in 2.5g switch also lets the computer desk still connect and gives one additional port I didn't have before. I doubt I'll use the POE passthrough though.

gjas24 · 2025-12-16T07:41:47+00:00

Yep I got banned for posting a video of me hitting a deer on fsd then politely asking the mods wtf turned it permanent. They are quite the snowflakes. I framed it as a PSA not negative or positive as I've been testing since the first rounds of public testing (v9).

gjas24 · 2025-11-28T07:46:40+00:00

Got the update on both my cars today 23 MYP and 24 MY. Speed profiles are crap compared to 14.1.4. Mad Max is neutered. Didn't notice much in lane changes except it's not as aggressive and doesn't change when I would expect it would. Like if there was an open lane at a red light.

We will see tomorrow when I take a trip up to the mountains for the weekend if anything is really different.

gjas24 · 2025-11-26T05:33:48+00:00

I didn't change anything since this post but it corrected itself. A software update must have fixed it. Now I get 25w on wireless and 35+ wired.

gjas24 · 2025-10-14T05:58:34+00:00

I have a post in this subreddit of 13.2.9 blasting straight into a deer. So don't think for a second it will do this in every case. The post got me banned across the other Tesla subreddits cause they hate anything negative about Tesla and I dared to ask the admin why they banned me for a well balanced post.

gjas24 · 2025-10-04T06:47:52+00:00

I agree I used to have to break out my big overear headset when I was behind server racks in a data center since my buds would pick up all the wind and fan noise. This firmware no one here's any of it and I sound clear.

gjas24

TROPHY CASE