automaton
Occasional Visitor
The static list is certainly in NVRAM, but I will print the same NVRAM dump as above the next time it happens so we can see.
Solved High nvram usage
- Thread starter mad_ady
- Start date
The static list is certainly in NVRAM, but I will print the same NVRAM dump as above the next time it happens so we can see.
ColinTaylor
Part of the Furniture
Yes, but it's.... static. In other words, dnsmasq is only reading the existing data at startup, it's not writing anything to nvram. I'm not saying you don't have an nvram problem, but so far everything you've posted has pointed to memory issues.
maxbraketorque
Very Senior Member
386.10 has caused an ~200 byte increase in nvram usage. I'm now within 200 bytes of the 65536 byte limit. Ready for Merlin to toss settings for three VPN clients for the AC68U. 
Meh not having an 386.10 NVRAM issue here on a RT-AC68U (no VPN, no AiProtection, or anything special besides YazDHCP and YazFi).386.10 has caused an ~200 byte increase in nvram usage. I'm now within 200 bytes of the 65536 byte limit. Ready for Merlin to toss settings for three VPN clients for the AC68U.
If this was directed at my post, yes primarily so I could set the DNS servers. Ran into problems with certain guest WiFi IoT devices failing to work properly because they couldn't reach my main LAN's Pi-Hole's using just Asus's Guest WiFi. Also use a few other features of YazFi as well (like client isolation for example).
maxbraketorque
Very Senior Member
Meh not having an 386.10 NVRAM issue here on a RT-AC68U (no VPN, no AiProtection, or anything special besides YazDHCP and YazFi).
View attachment 48700
I've been wanting to see proof that a router hard reset would take care of the nvram issue. This is the first I've seen of anyone showing clear proof, so this is helpful. How long has it been since you've done a full reset, and have you seen the nvram usage increase over time?
Not a hard reset in my case, although that is where to start. Rather a running of various scripts mentioned in other threads. Currently, a day after posting that screen shot by NVRAM hasn't changed. Still at 47831 / 65536 bytes. Router has been up for over 6 days.
Scripts that I've been using. YMMV with them. RMerlin's script at the following post:
https://www.snbforums.com/threads/asus-rt-ac68u-386-2_6-low-on-free-nvram.73158/#post-695283
Code:
#!/bin/sh
echo "Removing unused cert/key from nvram..."
for i in 1 2 3 4 5
do
nvram unset vpn_crt_client$i\_ca
nvram unset vpn_crt_client$i\_extra
nvram unset vpn_crt_client$i\_crt
nvram unset vpn_crt_client$i\_key
nvram unset vpn_crt_client$i\_crl
nvram unset vpn_crt_client$i\_static
done
for i in 1 2
do
nvram unset vpn_crt_server$i\_ca
nvram unset vpn_crt_server$i\_dh
nvram unset vpn_crt_server$i\_ca_key
nvram unset vpn_crt_server$i\_extra
nvram unset vpn_crt_server$i\_client_crt
nvram unset vpn_crt_server$i\_crl
nvram unset vpn_crt_server$i\_crt
nvram unset vpn_crt_server$i\_key
nvram unset vpn_crt_server$i\_static
nvram unset vpn_crt_server$i\_client_key
done
# SSH also migrated host keys to jffs a while back
nvram unset sshd_dsskey
nvram unset sshd_ecdsakey
nvram unset sshd_hostkey
nvram commit
echo "done."https://www.snbforums.com/threads/solved-high-nvram-usage.56848/#post-494736
Code:
for line in `nvram show | grep ^[^=]*=$ `; do var=${line%*=}; nvram unset $var; done; nvram commit./CleanupNVRAMvars.sh -unset) in this post:https://www.snbforums.com/threads/3...uild-s-for-ac-models.83565/page-2#post-824457
Bash:
#!/bin/sh
####################################################################
# CleanupNVRAMvars.sh
# To remove deprecated NVRAM entries for VPN & SSH keys.
# Last Modified: Martinski W. [2023-Feb-23]
####################################################################
set -u
_UnsetNVRAMvars_()
{
if [ $# -eq 0 ] || [ -z "$1" ] ; then return 1 ; fi
local Count="$(nvram show 2>/dev/null | grep -c "^$1")"
if [ $Count -gt 0 ]
then
if [ $# -eq 2 ] && [ -n "$2" ] && \
$doNVRAM_unset && echo && ! _PromptForYesOrNo_ "$2"
then return 10 ; fi
if "$firstRun" ; then firstRun=false ; echo "$SEPstr1" ; fi
for KeyStr in $(nvram show 2>/dev/null | grep "^$1")
do
if ! echo "$KeyStr" | grep -qE ".*[=]+.*"
then Count=$((--Count)); continue ; fi
echo "KeyName: [${KeyStr%%=*}]"
$doNVRAM_unset && nvram unset "${KeyStr%%=*}"
done
echo "VARs COUNT: [$Count]"
$doNVRAM_unset && \
echo "COUNT AFTER: [$(nvram show 2>/dev/null | grep -c "^$1")]"
echo "$SEPstr1"
doNVRAM_commit=$doNVRAM_unset
return 0
else
echo "NVRAM variables [${1}.*] NOT FOUND."
return 1
fi
}
_PromptForYesOrNo_()
{
read -n 1 -p "$1 [Y|N] N?" YESorNO
if [ -z "$YESorNO" ] ; then return 1 ; fi
echo
if [ "$YESorNO" = "Y" ] ; then return 0 ; fi
return 1
}
firstRun=true
doNVRAM_unset=false
doNVRAM_commit=false
SEPstr0="=================================================="
SEPstr1="--------------------------------------------------"
if [ $# -gt 0 ]
then
if [ "$1" = "-unset" ]
then doNVRAM_unset=true
else echo "*UNKNOWN* Parameter [$1]." ; exit 1
fi
fi
echo -n "NVRAM " ; nvram show | grep "^size: "
echo "$SEPstr0"
_UnsetNVRAMvars_ "vpn_crt_client"
_UnsetNVRAMvars_ "vpn_crt_server"
_UnsetNVRAMvars_ "sshd_.*.key="
for VPNnum in 5 4 3
do
_UnsetNVRAMvars_ "vpn_client${VPNnum}_" "Remove ALL OpenVPN Client${VPNnum} variables?"
[ $? -eq 10 ] && echo "Skipping OpenVPN Client${VPNnum} variables."
done
echo "$SEPstr0"
echo -n "NVRAM " ; nvram show | grep "^size: "
if ! "$doNVRAM_commit"
then echo "NOTHING to commit."
else nvram commit ; echo "Completed successfully."
fi
#EOF#
Last edited:
maxbraketorque
Very Senior Member
Code:
1st script...
Code:
3rd script...Ah, I see. I ran the 1st script around when Merlin posted it, so that one gets me nothing.
The 3rd script removes all variables associated with VPN clients 3, 4, and 5 and is apparently good for removing ~2500 bytes which is very helpful. This is equivalent to what Merlin has proposed to mitigate the low nvram issue with the AC68U, but Martinski's script does not make a permanent change, i.e., the variables that are eliminated come back when the router is rebooted. I see that Martinski has a script to delete the variables on router boot-up, but IMHO, better if Merlin just eliminates VPN clients 3, 4, and 5 because that approach requires no special knowledge to more easily avoid the low nvram issue.
The second script that you posted is making the lion's share of the difference for your AC68U, but unfortunately this is not an ideal script to run because it can cause issues down the road if people change router settings associated with the variables that have been removed.
So I still contend that the best way to combat the low nvram issue with Merlin's AC68U firmware is for Merlin to eliminate VPN clients 3, 4, and 5.
It will likely take some time for RMerlin to make such a change and test it if he ultimately decides to make the change for the RT-AC68U. In the mean time one can try the various suggestions (even if they have draw backs) to deal with low NVRAM right now. And yes some or all of the methods have to be run after each router reboot. Indicated as much in my post. It is what it is if one wants to deal with the the issue right now on a RT-AC68U.
Tech9
Part of the Furniture
That's a lot of "maintenance" to keep this router going. What happens after reboot without running the scripts?
Lot of "maintenance"? Not really. Literally takes a minute or so to run the two scripts (already saved to the router) and one line of code if or when I reboot that route which usually is not often. That router will eventually be replaced, but for now it still chugges along. Don't remember the exact NVRAM usage post reboot but it was significantly higher.
Tech9
Part of the Furniture
Okay, but don't say "not having NVRAM issue here" when you fight the NVRAM issue on every reboot.
If your router is almost out of nvram, you save some nvram by using the script that removes some VPN variables, and then fill up that recovered nvram with, say, more DHCP reservations. Next boot, the router may try to readd the missing VPN variables, run out of free nvram, and leave you with completely corrupted settings and/or a router no longer booting.
You can't rely on that script as a solution.
You can't rely on that script as a solution.
My post (that you quoted) was a bit tongue-in-cheek. I personally am not having to "fight the NVRAM issue on every reboot". For my use the router runs fine with the NVRAM at approx 59325 / 65536 bytes post reboot. I choose to experiment to find ways to lower the NVRAM, because why not. Its fun to tinker at times.
RMerlin is absolutely correct, the script (various scripts or lines of code) mentioned in these NVRAM threads are not "solutions" to the low NVRAM some may face with the RT-AC68U.
RT-AC68U users who are having the low NVRAM warning message should start by doing a hard factory reset and manually configure their router. That seems to clear the Low NVRAM warning message based on various posts here. It seems that the next basic step, if low NVRAM is still an issue, is to look at the DHCP manual IP reservations and deal with those by either; removing them, or use YazDHCP or similar methods. If one still has NVRAM issues they can review the various NVRAM threads for other options (some temporary until reboot) to see if those options are something they want to try, at their own risk. As with more than a few things discussed here it's "your mileage may vary" on the results. Or one can choose to update to a newer router and not have to worry about the NVRAM on the RT-AC68U.
Last edited:
Tech9
Part of the Furniture
Probably, but posting screenshots like the one above with no explanation is a bit misleading to others:
Not misleading at all, that person assumed I had done a hard reset when I never indicated such in that post. Look at the post I replied to, they posted:
They make no mention of doing a hard reset either. Should we automatically assume they did one?386.10 has caused an ~200 byte increase in nvram usage. I'm now within 200 bytes of the 65536 byte limit. Ready for Merlin to toss settings for three VPN clients for the AC68U.
Guess we'll just agree to disagree. In any event this repeated back and forth over Tech9's issue with my prior post and it's screen capture is just dragging this thread off topic. To bring the thread back on topic: For those who are having NVRAM issues read through this and other NVRAM threads for various suggestions and ideas on how to potentially deal (even if only temporarily) with your specific NVRAM issue. Good Luck.
Last edited:
Tech9
Part of the Furniture
You already agreed with Like the script(s) you use is(are) not a solution:
What I don't agree with is posting "manipulated" screenshots misrepresenting the real situation. The real NVRAM situation with your minimum configuration RT-AC68U is 59325/65536 after boot and not 47831/65536. @maxbraketorque was the first one to believe you solved the issue.
Similar threads
Similar threads
Similar threads
-
CVSS High 8.1 - CVE-2015-8960 with firmware 3004.388.8_2
- Started by datorexpert67
- Replies: 6
-
-
-
-
-
-
-
Segmentation Fault message after entering long string into nvram (static leases)
- Started by Aziron5
- Replies: 0
-
Bug Report: nvram chilli_enable=1 when guest network is removed causes no routing to occur
- Started by Acru
- Replies: 2
-
Latest threads
-
-
Need some help with older Nas which only allow 16TB as largest volume
- Started by apvm
- Replies: 1
-
-
-
Possible to connect 2 Asus Zenwifi’s directly to the ISP router in AP mode?
- Started by Agepagelage
- Replies: 2
Support SNBForums w/ Amazon
If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!
Sign Up For SNBForums Daily Digest
Get an update of what's new every day delivered to your mailbox. Sign up here!