[squid-users] I have found this Squid-Cache designed blacklist, anyone seen it?

2018-03-06 Thread Eliezer Croitoru
Hey,

 

While I was wondering around github I stumbled upon this repository:

https://github.com/maravento/blackweb

 

Which claims to centralize many blacklists and designed for the use with
Squid-Cache.

Anyone have seen or tried this list?

 

I have seen it and thinking about writing an enhancement to this blacklist
scripts.


Can anyone help with this?

 

Eliezer

 



Eliezer Croitoru  
Linux System Administrator
Mobile: +972-5-28704261
Email: elie...@ngtech.co.il



 

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] Squid SNMP remote monitoring and IP fragmentation

2018-03-06 Thread Peter Viskup
Communication is ok. Problem was with pcap filtering based on port
number. Only the first fragment of the packet have this information.
All others have port fields empty. More information in tcpdump man
page in IP Fragmentation section.

In new packet capture the request for 87 OIDs is replied with 87
corresponding values.

Issue with not consistent data values in Zabbix are related to Zabbix
server post-processing.

On Tue, Mar 6, 2018 at 12:10 PM, Amos Jeffries  wrote:
> On 06/03/18 23:36, Eliezer Croitoru wrote:
>> Is this SNMP value present in the cache-manager pages?
>> If so it would be pretty simple to write a script that will extract the 
>> relevant data via http.
>>
>
> OID *.1.5.2.2 is the mgr:client_list table data, excluding the TCP_*
> code breakdown for responses given.
>
> Amos
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] Squid SNMP remote monitoring and IP fragmentation

2018-03-06 Thread Amos Jeffries
On 06/03/18 23:36, Eliezer Croitoru wrote:
> Is this SNMP value present in the cache-manager pages?
> If so it would be pretty simple to write a script that will extract the 
> relevant data via http.
> 

OID *.1.5.2.2 is the mgr:client_list table data, excluding the TCP_*
code breakdown for responses given.

Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


Re: [squid-users] Squid SNMP remote monitoring and IP fragmentation

2018-03-06 Thread Eliezer Croitoru
Is this SNMP value present in the cache-manager pages?
If so it would be pretty simple to write a script that will extract the 
relevant data via http.

Eliezer


Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: elie...@ngtech.co.il


-Original Message-
From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf 
Of Amos Jeffries
Sent: Friday, March 2, 2018 15:38
To: squid-users@lists.squid-cache.org
Subject: Re: [squid-users] Squid SNMP remote monitoring and IP fragmentation

On 03/03/18 01:28, Peter Viskup wrote:
> We do monitor our Squid's via SNMP with Zabbix and use the template
> available on Zabbix share portal [1].
> Retrieval of values is not reliable. Seems to be related to IP fragmentation.
> 
> The complete answer should be 4325B long.
> 
> ~# snmpwalk -m /usr/share/squid3/mib.txt -v2c -CE
> .1.3.6.1.4.1.3495.1.5.2.2 -Cc -c d8d385baeb54 localhost:3401
> .1.3.6.1.4.1.3495.1 2>/dev/null | wc -c
> 4325
> 
> But on the Squid we receive one 1514B packet (not complete answer).

You do know there is a difference between binary and textual
representations of these things right?

The packets contain the full OID binary data, and the snmpwalk output is
abbreviated down to textual names which may be half or even a third the
size. Then there is the protocol headers in packets which in the case of
single SNMP queries like these are much larger than the OID and data itself.


Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users