[squid-users] Need help with insert code into html body
Hi everyone, I need you help with squid to insert some code to html body returned to clients, for analytic reasons. I searched and read some related info, most of which is about ICAP and eCAP. I wonder if any of you have the experience or guide on this? Thanks! Best, Ronaldo
Re: [squid-users] Squid Kerberos authentication
On Sat, 28 Nov 2009 17:44:40 -0500 Extra Fu extr...@gmail.com wrote: Hello, I'm considering dropping the use of NTLM in favor of Kerberos (auth_param negotiate) to authenticate users against my AD 2003 server. To do this, I would like to use the squid_kerb_auth program. Prior starting my work on this, I was wondering what would happen for users not currently logged in on my domain controller (ie., users not having a valid Kerberos ticket) - for example, users at home or Mac OS X / Linux users? From my readings, Safari 3/4, Firefox 2+, IE7/8 all seems to support Kerberos authentication to a Squid proxy but for clients, it's not clear to me (after reading RFC4559) what will happen if no ticket is present when the user goes through the Squid proxy. Will it just fail? Thanks for any light you can shine on this. Best regards, Hi, at least on Linux it is possible to obtain a valid ticket with the kinit command. If you want to integrate it further you should take a look at the kerberos PAM-module (libpam-krb5 on debian). Firefox is then able to use kerberos to authenticate to Squid. I use this kind of setup in a productive environment. Regards -- --- Malte Schröder malte...@gmx.de --- signature.asc Description: PGP signature
Re: [squid-users] Need help with insert code into html body
On Sun, Nov 29, 2009 at 4:45 PM, Ronaldo Zhou ronaldo.z...@gmail.com wrote: Hi everyone, I need you help with squid to insert some code to html body returned to clients, for analytic reasons. Squid is designed that NO change to original HTTP response body, though you can insert some additional headers. Also eCap is squid-3.1's new feature.
RE: [squid-users] Need help with insert code into html body
Date: Sun, 29 Nov 2009 19:26:47 +0800 From: lan.messerschm...@gmail.com To: ronaldo.z...@gmail.com CC: squid-users@squid-cache.org Subject: Re: [squid-users] Need help with insert code into html body On Sun, Nov 29, 2009 at 4:45 PM, Ronaldo Zhou wrote: Hi everyone, I need you help with squid to insert some code to html body returned to clients, for analytic reasons. Squid is designed that NO change to original HTTP response body, though you can insert some additional headers. How does compressin work? I thought someone said you could compress results in some squid versions? Also, I've been playing with the ad zapper and it clearly modifies results. There is no reason the modified file can't get the target html and do something with it. Also eCap is squid-3.1's new feature. _ Windows 7: I wanted simpler, now it's simpler. I'm a rock star. http://www.microsoft.com/Windows/windows-7/default.aspx?h=myidea?ocid=PID24727::T:WLMTAGL:ON:WL:en-US:WWL_WIN_myidea:112009
Re: [squid-users] Need help with insert code into html body
On Sun, Nov 29, 2009 at 8:28 PM, Mike Marchywka marchy...@hotmail.com wrote: How does compressin work? I thought someone said you could compress results in some squid versions? The official squid doesn't do that compression, it's maybe other organization's release, or with an external module. You could modify the source and implement that, go on, nobody will blame you.
RE: [squid-users] Need help with insert code into html body
[ lol, hotmail seems to insist on non-text email which the squid list sanely rejected I guess the setting is specific to a given machine since I had changed it before] Subject: Re: [squid-users] Need help with insert code into html body On Sun, Nov 29, 2009 at 8:28 PM, Mike Marchywka marchy...@hotmail.com wrote: How does compressin work? I thought someone said you could compress results in some squid versions? The official squid doesn't do that compression, it's maybe other organization's release, or with an external module. You could modify the source and implement that, go on, nobody will blame you. Well, adzapper may be a better example then. Presumably the adzapper logic could get the target url and modify it. Right now it just replaces it with a generated image saying zapped. Note: while waiting for firefox on windoze to stop doing vm and echo even 1 of my last 50 keystrokes, I retyped this message on a debian machine with no hesitations or swearing required to get it to respond. IT looks like the other machine finally came back but it doesn't matter now. In any case, editing may be a bit bad as I transition to something that doesn't need a supercomputer to type text. Hotmail won't run on my mom's Dell desktop without hanging every few messages either. arrggghh. Windows 7: I wanted simpler, now it's simpler. I'm a rock star. _ Bing brings you maps, menus, and reviews organized in one place. http://www.bing.com/search?q=restaurantsform=MFESRPpubl=WLHMTAGcrea=TEXT_MFESRP_Local_MapsMenu_Resturants_1x1
Re: [squid-users] Squid Kerberos authentication
Hello Malte, First of all, thanks for your prompt reply. at least on Linux it is possible to obtain a valid ticket with the kinit command. If you want to integrate it further you should take a look at the kerberos PAM-module (libpam-krb5 on debian). Firefox is then able to use kerberos to authenticate to Squid. I use this kind of setup in a productive environment. Yep, that's what I thought. In any case, if the ticket has to be present for things to work (which is normal), what are the options for Windows users (not logged in on the domain)? In my case, the real use of the Squid proxy is for users outside of my network, for letting them access resources for which their access is limited to my local network (think of a library proxy). Since we can't have encryption between the browser and the Squid proxy, the most secure authentication mechanism has to be used... of course users could just use the VPN server, but that's an other story :-/ Thanks,
[squid-users] squid crashes by itself and reboots automatically
Dear all, I have multiple servers running squid 2.7-stable7. Lately I have noticed that most of these servers are crashing sometimes everyday creating a core dump file and then after creating the file restart by itself. After reading the core file with gdb and doing a backtrace I got the following info. Can anyone please help me identify what is going on with these squid servers. You help is very valuable. gdb /usr/sbin/squid core.4264 GNU gdb Fedora (6.8-24.fc9) Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type show copying and show warranty for details. This GDB was configured as x86_64-redhat-linux-gnu... (no debugging symbols found) warning: Can't read pathname for load map: Input/output error. Reading symbols from /usr/lib64/libtcmalloc.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libtcmalloc.so.0 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/libssl.so.7... (no debugging symbols found)...done. Loaded symbols for /lib64/libssl.so.7 Reading symbols from /lib64/libcrypto.so.7...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypto.so.7 Reading symbols from /lib64/libdl.so.2... (no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /lib64/librt.so.1... (no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libm.so.6... (no debugging symbols found)...done. Loaded symbols for /lib64/libm.so.6 Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /lib64/libc.so.6... (no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /usr/lib64/libunwind.so.7...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libunwind.so.7 Reading symbols from /usr/lib64/libstdc++.so.6... (no debugging symbols found)...done. Loaded symbols for /usr/lib64/libstdc++.so.6 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /usr/lib64/libgssapi_krb5.so.2... (no debugging symbols found)...done. Loaded symbols for /usr/lib64/libgssapi_krb5.so.2 Reading symbols from /usr/lib64/libkrb5.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2... (no debugging symbols found)...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /usr/lib64/libk5crypto.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libk5crypto.so.3 Reading symbols from /lib64/ld-linux-x86-64.so.2... (no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib64/libkrb5support.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1... (no debugging symbols found)...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libselinux.so.1... (no debugging symbols found)...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 (no debugging symbols found) Core was generated by `(squid) -D'. Program terminated with signal 6, Aborted. [New process 4264] [New process 4277] [New process 4303] [New process 4292] [New process 4294] [New process 4288] [New process 4302] [New process 4300] [New process 4291] [New process 4299] [New process 4287] [New process 4293] [New process 4298] [New process 4301] [New process 4289] [New process 4295] [New process 4290] [New process 4286] [New process 4296] [New process 4297] [New process 4285] [New process 4284] [New process 4283] [New process 4282] [New process 4281] [New process 4280] [New process 4279] [New process 4278] [New process 4276] [New process 4275] [New process 4274] [New process 4273] [New process 4272] Missing separate debuginfos, use: debuginfo-install squid.x86_64 ---Type return to continue, or q return to quit--- #0 0x00347a832215 in raise () from /lib64/libc.so.6 (gdb) bt #0 0x00347a832215 in raise () from /lib64/libc.so.6 #1 0x00347a833d83 in abort () from /lib64/libc.so.6 #2 0x0049939a in death () #3
[squid-users] Re: Squid Kerberos authentication
Extra Fu extr...@gmail.com wrote in message news:11be40100911281444x673710b7w26a337d24549...@mail.gmail.com... Hello, I'm considering dropping the use of NTLM in favor of Kerberos (auth_param negotiate) to authenticate users against my AD 2003 server. To do this, I would like to use the squid_kerb_auth program. Prior starting my work on this, I was wondering what would happen for users not currently logged in on my domain controller (ie., users not having a valid Kerberos ticket) - for example, users at home or Mac OS X / Linux users? From my readings, Safari 3/4, Firefox 2+, IE7/8 all seems to support Kerberos authentication to a Squid proxy but for clients, it's not clear to me (after reading RFC4559) what will happen if no ticket is present when the user goes through the Squid proxy. Will it just fail? On a Windows machine which is not part of the AD domain you will get prompted for username password and if you have provided a WINS server the client will determine the AD server to authenticate the username/password against. In theory Firefox could do the same - use the username/password and do a kinit for the user, but I haven't seen that Firefox prompts the user. Thanks for any light you can shine on this. Best regards, Regards Markus
RE: [squid-users] Need help with insert code into html body
On Sun, 29 Nov 2009 08:14:36 -0500, Mike Marchywka marchy...@hotmail.com wrote: [ lol, hotmail seems to insist on non-text email which the squid list sanely rejected I guess the setting is specific to a given machine since I had changed it before] Subject: Re: [squid-users] Need help with insert code into html body On Sun, Nov 29, 2009 at 8:28 PM, Mike Marchywka marchy...@hotmail.com wrote: How does compressin work? I thought someone said you could compress results in some squid versions? The official squid doesn't do that compression, it's maybe other organization's release, or with an external module. You could modify the source and implement that, go on, nobody will blame you. gzip/deflate is a third-party eCAP plugin. chunked is a transmission-level encryption of the content, not an alteration. * the key thing with both is that the visitor gets what they asked for in its original form. ESI requires website administrator alterations. * the key thing here is that the user gets what they asked for as the website operator designed it to be received. It's not that we can't do content alteration with Squid it's that we developers WON'T add it to the main code without very good reasons and clear boundaries. It's a very popular for people to think they'll just 'fix' something by changing the content received. There are a lot of legal, security and neutrality issues involved with altering third-party copyright information without either the content creator or the service users explicit consent. You need to take a close look at your ethics when this idea pops up. http://www.pcpd.org.hk/misc/pamela_chan/tsld003.htm Content alteration violates the 3rd, 4th, 5th, 6th, and 7th UN international consumer rights, to varying degrees. With the exception of Britain and Australia it's illegal to do this in Democratic countries. They have the same digital-rights policy as China. Prohibiting the transmission, viewing or storage of certain unspecified content of 'unsavory' nature. It's a regular sight for oppressive national dictatorships of various forms to do content alteration, but even there its illegal for non-government personnel to do. If you have management pressure to do this here are a few prior examples: http://www.wired.com/threatlevel/2008/05/isp-content-f-1/ http://www.webpronews.com/topnews/2006/02/07/isps-may-face-liability-for-altering-email http://www.wired.com/threatlevel/2007/12/canadian-isps-p/ http://www.ip-watch.org/weblog/2009/02/09/isp-liability-limitations-and-exceptions-top-global-copyright-issues-in-2009/ http://www.wired.com/threatlevel/2007/11/comcast-sued-ov/ http://www.macworld.com/article/132075/2008/02/netneutrality1.html http://www.techcrunch.com/2007/06/23/real-evil-isp-inserted-advertising/ And the things you avoid by not adding your own content to the pages: http://www.out-law.com/page-753 Well, adzapper may be a better example then. Presumably the adzapper logic could get the target url and modify it. Right now it just replaces it with a generated image saying zapped. Yes. AdZapper does a simple access denied when retrieving the adverts. Providing its own custom error page which the browser displays instead of whatever add content. Squid does this easily with ACL and the deny_info directive. Amos
Re: [squid-users] squid crashes by itself and reboots automatically
On Sun, Nov 29, 2009 at 8:25 PM, Ragheb Rustom rag...@smartelecom.org wrote: Dear all, I have multiple servers running squid 2.7-stable7. Lately I have noticed that most of these servers are crashing sometimes everyday creating a core dump file and then after creating the file restart by itself. After reading the core file with gdb and doing a backtrace I got the following info. Can anyone please help me identify what is going on with these squid servers. You help is very valuable. Is there anything in cache.log? Possibly just the few lines before the restart. -- /kinkie
RE: [squid-users] squid crashes by itself and reboots automatically
Date: Mon, 30 Nov 2009 00:24:38 +0100 From: gkin...@gmail.com To: rag...@smartelecom.org CC: squid-users@squid-cache.org Subject: Re: [squid-users] squid crashes by itself and reboots automatically On Sun, Nov 29, 2009 at 8:25 PM, Ragheb Rustom wrote: Dear all, I have multiple servers running squid 2.7-stable7. Lately I have noticed that most of these servers are crashing sometimes everyday creating a core dump file and then after creating the file restart by itself. After reading the core file with gdb and doing a backtrace I got the following info. Can anyone please help me identify what is going on with these squid servers. You help is very valuable. Is there anything in cache.log? Possibly just the few lines before the restart. the default config file seems good about logging stuff. Was that sparse stack trace typical or just the first one you had? The only sig that was obvious was strcmp- if it was blowing up there you either had pathological strings or memory corruption or timing issue etc. Not too informative until you at least know if it is a consistent failure point. -- /kinkie _ Windows 7: I wanted simpler, now it's simpler. I'm a rock star. http://www.microsoft.com/Windows/windows-7/default.aspx?h=myidea?ocid=PID24727::T:WLMTAGL:ON:WL:en-US:WWL_WIN_myidea:112009
RE: [squid-users] squid crashes by itself and reboots automatically
The only entry that I have in the cache.log are these lines before that I have all storelocatevary warnings but nothing out of the ordinary. FATAL: Received Segment Violation...dying. 2009/11/29 22:45:48| storeDirWriteCleanLogs: Starting... 2009/11/29 22:45:48| WARNING: Closing open FD 24 2009/11/29 22:45:48| commSetEvents: epoll_ctl(EPOLL_CTL_DEL): failed on fd=24: (1) Operation not permitted Lines that are before this error are all similar to these storeLocateVary: Not our vary marker object, 9884D2F9295EC65D66A36B329A3C7BBD = 'http://b.static.ak.fbcdn.net/rsrc.php/zE010/hash/2kkc6o 96.css', 'accept-encoding=gzip,%20deflate'/'gzip, deflate' 2009/11/29 22:45:47| storeLocateVary: Not our vary marker object, DCBAB677A2364853342DA79508301881 = 'http://static.ak.fbcdn.net/rsrc.php/z5WTN/hash/arvryq2p .css', 'accept-encoding=gzip,%20deflate'/'gzip, deflate' 2009/11/29 22:45:47| storeLocateVary: Not our vary marker object, FBD3324530E5C7D93199529A191361C0 = 'http://static.ak.fbcdn.net/rsrc.php/zBICQ/hash/ryfrvghz .css', 'accept-encoding=gzip,deflate,sdch'/'gzip,deflate,sdch' 2009/11/29 22:45:47| storeLocateVary: Not our vary marker object, 498DE9ABC02057F4C59D6A60B2E515B1 = 'http://static.ak.fbcdn.net/rsrc.php/z37DG/hash/e5d2uja2 .css', 'accept-encoding=gzip,deflate,sdch'/'gzip,deflate,sdch' 2009/11/29 22:45:47| storeLocateVary: Not our vary marker object, 956DBDC557535910ECC2BDE74EEC30D4 = 'http://b.static.ak.facebook.com/common/redirectiframe.h tml', 'accept-encoding=gzip,%20deflate'/'gzip, deflate' Sincerely, Ragheb Rustom -Original Message- From: Kinkie [mailto:gkin...@gmail.com] Sent: Monday, November 30, 2009 1:25 AM To: Ragheb Rustom Cc: squid-users@squid-cache.org Subject: Re: [squid-users] squid crashes by itself and reboots automatically On Sun, Nov 29, 2009 at 8:25 PM, Ragheb Rustom rag...@smartelecom.org wrote: Dear all, I have multiple servers running squid 2.7-stable7. Lately I have noticed that most of these servers are crashing sometimes everyday creating a core dump file and then after creating the file restart by itself. After reading the core file with gdb and doing a backtrace I got the following info. Can anyone please help me identify what is going on with these squid servers. You help is very valuable. Is there anything in cache.log? Possibly just the few lines before the restart. -- /kinkie
RE: [squid-users] squid crashes by itself and reboots automatically
Hi Mike, These are the gdb bt of the core dumps that I got on other servers showing the same behavior. It seems that are all failing at the strcmp. Any ideas what could be causing this? Server 1: gdb /usr/sbin/squid core.2582 GNU gdb Fedora (6.8-24.fc9) Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type show copying and show warranty for details. This GDB was configured as x86_64-redhat-linux-gnu... (no debugging symbols found) warning: Can't read pathname for load map: Input/output error. Reading symbols from /usr/lib64/libtcmalloc.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libtcmalloc.so.0 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/libssl.so.7... (no debugging symbols found)...done. Loaded symbols for /lib64/libssl.so.7 Reading symbols from /lib64/libcrypto.so.7...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypto.so.7 Reading symbols from /lib64/libdl.so.2... (no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /lib64/librt.so.1... (no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libm.so.6... (no debugging symbols found)...done. Loaded symbols for /lib64/libm.so.6 Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /lib64/libc.so.6... (no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /usr/lib64/libunwind.so.7...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libunwind.so.7 Reading symbols from /usr/lib64/libstdc++.so.6... (no debugging symbols found)...done. Loaded symbols for /usr/lib64/libstdc++.so.6 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /usr/lib64/libgssapi_krb5.so.2... (no debugging symbols found)...done. Loaded symbols for /usr/lib64/libgssapi_krb5.so.2 Reading symbols from /usr/lib64/libkrb5.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2... (no debugging symbols found)...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /usr/lib64/libk5crypto.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libk5crypto.so.3 Reading symbols from /lib64/ld-linux-x86-64.so.2... (no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib64/libkrb5support.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1... (no debugging symbols found)...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libselinux.so.1... (no debugging symbols found)...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 (no debugging symbols found) Core was generated by `(squid) -D'. Program terminated with signal 6, Aborted. [New process 2582] [New process 2613] [New process 2601] [New process 2612] [New process 2615] [New process 2606] [New process 2607] [New process 2605] [New process 2610] [New process 2604] [New process 2614] [New process 2603] [New process 2608] [New process 2602] [New process 2609] [New process 2599] [New process 2611] [New process 2598] [New process 2600] [New process 2597] [New process 2596] [New process 2593] [New process 2595] [New process 2592] [New process 2594] [New process 2590] [New process 2591] Missing separate debuginfos, use: debuginfo-install squid.x86_64 ---Type return to continue, or q return to quit--- #0 0x003931832215 in raise () from /lib64/libc.so.6 (gdb) bt #0 0x003931832215 in raise () from /lib64/libc.so.6 #1 0x003931833d83 in abort () from /lib64/libc.so.6 #2 0x004993ca in death () #3 signal handler called #4 0x0039318809c2 in strcmp () from /lib64/libc.so.6 #5 0x0043270e in ?? () #6 0x004905b4 in ?? () #7 0x0049111b in ?? () #8 0x004a69d1 in ?? () #9 0x004a8fca in aioCheckCallbacks () #10 0x00493137 in ?? () #11 0x00438b0e in ?? () #12
Re: [squid-users] squid crashes by itself and reboots automatically
Ragheb Rustom wrote: Hi Mike, These are the gdb bt of the core dumps that I got on other servers showing the same behavior. It seems that are all failing at the strcmp. Any ideas what could be causing this? Not without debug symbols to identify the area of code calling strcmp(). There are just too many places its used for guesses to be possible. The cache.log is usually helpful, but the messages you posted earlier appear to be nowhere near any strcmp(). You could try the daily snapshot with debug symbols left in and see what appears. Amos -- Please be using Current Stable Squid 2.7.STABLE7 or 3.0.STABLE20 Current Beta Squid 3.1.0.15
