[squid-users] Fwd: What's means ? ERR_PRECONDITION_FAILED
Anyone know what is error : ERR_PRECONDITION_FAILED This occure randomly on some request. Sometimes on swf, sometimes on css files... Bellow the requests and response headers.. Squid Version: Squid Cache: Version 3.2.0.3 Best regards, Request URL: http://www.bradesco.com.br/html/img/tv/filme0.swf Request Method: GET Status Code: 412 Precondition Failed Request Headers Accept: */* Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Accept-Encoding: gzip,deflate,sdch Accept-Language: pt-BR,en-US;q=0.8,en;q=0.6 Connection: keep-alive Cookie: CKIDP=YWO4CLCF4aOjYyoPncP9Y5p+WNFY1292850798; CTLNC=dzvo+cmywMdZd/sc3mKtTBhtxpNY05 Host: www.bradesco.com.br If-Modified-Since: Thu, 16 Dec 2010 17:22:02 GMT If-None-Match: 7396-4bab-4abca280 Referer: http://www.bradesco.com.br/html/swf/destaque.swf User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.215 Safari/534.10 Response Headers Age:1292873418 Connection:keep-alive Content-Language: pt-br Content-Length: 2678 Content-Type: text/html Date: Mon, 20 Dec 2010 19:30:17 GMT Mime-Version: 1.0 Server: squid Vary: Accept-Language Via: 1.1 cache1.unetvale.com.br (squid) Warning: 113 cache1.unetvale.com.br (squid) This cache hit is still fresh and more than 1 day old X-Cache: HIT from cache1.unetvale.com.br X-Squid-Error: ERR_PRECONDITION_FAILED 0 -- Alex Montoanelli Analista de Sistemas Unetvale Conectividade +55 48 3263 8700 www.unetvale.net
[squid-users] TProxy + cache_peer parent
Hello everyone, I have a box with Squid + WCCP + tproxy working well, they have two squid process running. One is the frontend registered in WCCP, serving small files from RAM without disk cache, and another is a backend, not registered on WCCP, used for large files cached on disk as father of the frontend. When a request comes in the frontend and it makes the request to the destination, the client ip is what arrives at the destination, but when the frontend forwards the request to the backend (based on cache_peer_access), IP arrives at the destination is no longer the client, but the IP of the squid. My question is, is there a way from a request reach the destination forwarded by parent cache with the IP address of the original the customer ? Regards -- Alex Montoanelli
[squid-users] Traffic Question
Hello all, I have a network with around 2000 customers, all of them, passing by a Squid, configured with WCCP on a Cisco Router. I have configured too, my implementation of http://cachevideos.com/ - my implementation is on Php - more little and fast. Analyzing the Squid access logs, I see thousand of request to the file wlsetup-cvr.exe, from windows/live systems. My question is for peoples that have a medium/big network, with many Windows customers, if this is normal. Other observation is that the request are always partial, - 206 HTTP Code - Regards Alex Montoanelli Unetvale
Re: [squid-users] Help, wccp on ubuntu
Hello Ketua, You can't use REDIRECT target of iptables. You need use DNAT --to-destination: IP_OF_ETHERNET:3128 If you redirect to localhost, the packets are silent droped. Regards On Mon, Jun 8, 2009 at 12:43 AM, ketua kampung ke...@kampung.web.id wrote: Hi, I have problem to running up wccp on my squid. I follow the guide from http://wiki.squid-cache.org/SquidFaq/InterceptionProxy and http://www.digitalnerds.net/linux/transparent-squid-with-wccp/ This is my system. i use ubuntu 8.04 64bit. squid 2.7stable6 (compile by myselft). r...@box:~# squid -v Squid Cache: Version 2.7.STABLE6 configure options: '--sysconfdir=/etc/squid' '--prefix=/usr' '--enable-async-io' '--enable-removal-policies=lru,heap' '--disable-delay-pools' '--enable-kill-parent-hack' '--enable-snmp' '--enable-default-err-language=English' '--enable-err-languages=English' '--enable-cache-digests' '--enable-linux-netfilter' '--enable-gnuregex' '--enable-wccp' '--disable-auth' in squid.conf, i configure http_port 3128 transparent and enable the wccp. ifconfig wccp0 wccp0 Link encap:UNSPEC HWaddr 77-5C-40-03-00-00-F9-A1-00-00-00-00-00-00-00-00 inet addr:1.2.3.4 P-t-P:1.2.3.4 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MTU:1476 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) r...@box:~# iptunnel gre0: gre/ip remote any local any ttl inherit nopmtudisc wccp0: gre/ip remote 110.92.64.255 local 119.92.64.3 dev eth0 ttl inherit r...@box:~# cat /proc/sys/net/ipv4/ip_forward 1 r...@box:~# sysctl -a | grep rp_filter error: permission denied on key 'net.ipv4.route.flush' net.ipv4.conf.lo.rp_filter = 0 net.ipv4.conf.lo.arp_filter = 0 net.ipv4.conf.all.rp_filter = 0 net.ipv4.conf.all.arp_filter = 0 net.ipv4.conf.default.rp_filter = 0 net.ipv4.conf.default.arp_filter = 0 net.ipv4.conf.eth0.rp_filter = 0 net.ipv4.conf.eth0.arp_filter = 0 net.ipv4.conf.eth1.rp_filter = 0 net.ipv4.conf.eth1.arp_filter = 0 net.ipv4.conf.gre0.rp_filter = 0 net.ipv4.conf.gre0.arp_filter = 0 net.ipv4.conf.wccp0.rp_filter = 0 net.ipv4.conf.wccp0.arp_filter = 0 error: permission denied on key 'net.ipv6.route.flush' From my cisco, i can see my squid can comunicate wccp with cisco. RTR-INT-2811#sh ip wccp Global WCCP information: Router information: Router Identifier: 110.92.64.255 Protocol Version: 1.0 Service Identifier: web-cache Number of Service Group Clients: 1 Number of Service Group Routers: 1 Total Packets s/w Redirected: 89 Process: 0 Fast: 0 CEF: 89 Redirect access-list: -none- Total Packets Denied Redirect: 0 Total Packets Unassigned: 0 Group access-list: -none- Total Messages Denied to Group: 0 Total Authentication failures: 0 terminal monitor debug ip wccp even *Jun 8 03:30:51.423: WCCP-PKT: Sending I_See_You packet to 110.92.64.3 w/ rcvd_id 0296 *Jun 8 03:31:01.427: WCCP-EVNT: Built I_See_You msg body w/1 usable web caches, change # 000B *Jun 8 03:31:01.427: %WCCP-5-CACHEFOUND: Web Cache 110.92.64.3 acquired *Jun 8 03:31:01.427: WCCP-PKT: Received valid Here_I_Am packet from 110.92.64.3 w/rcvd_id 0296 *Jun 8 03:31:01.427: WCCP-PKT: Sending I_See_You packet to 110.92.64.3 w/ rcvd_id 0297 *Jun 8 03:31:01.427: WCCP-EVNT: Built I_See_You msg body w/1 usable web caches, change # 000C *Jun 8 03:31:01.427: WCCP-PKT: Received valid Assign_Buckets packet from 110.92.64.3 w/rcvd_id 0297 *Jun 8 03:31:11.431: WCCP-PKT: Received valid Here_I_Am packet from 110.92.64.3 w/rcvd_id 0297 *Jun 8 03:31:11.431: WCCP-PKT: Sending I_See_You packet to 110.92.64.3 w/ rcvd_id 0298 When i tcpdump on interface wccp0, i can see the paket flow from cisco to server. r...@box:~# tcpdump -i wccp0 -n listening on wccp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes 10:34:42.461441 IP 110.92.65.5.41038 202.158.66.92.80: S 842039074:842039074(0) win 5840 mss 1380,sackOK,timestamp 240146036 0,nop,wscale 7 10:34:45.453372 IP 110.92.65.5.41038 202.158.66.92.80: S 842039074:842039074(0) win 5840 mss 1380,sackOK,timestamp 240146336 0,nop,wscale 7 10:34:51.453431 IP 110.92.65.5.41038 202.158.66.92.80: S 842039074:842039074(0) win 5840 mss 1380,sackOK,timestamp 240146936 0,nop,wscale 7 10:35:03.453562 IP 110.92.65.5.41038 202.158.66.92.80: S 842039074:842039074(0) win 5840 mss 1380,sackOK,timestamp 240148136 0,nop,wscale 7 10:35:27.453852 IP 110.92.65.5.41038 202.158.66.92.80: S
[squid-users] assertion failed: MemBuf.cc:383: new_cap (size_t) capacity
Hello all. I have a squid 3.0-15 running on a FreeBSD 7.1/64, with a average of 50 request/second. Its running on a Dell PowerEdge 1950, with 8G/RAM - 2Xeon / 4cores - 2.3Ghz. After a few hours in production the squid reload, with theses messages in cachelog. Bellow is a backtrace. Anybody knows what is happening ? Regards 2009/05/21 10:10:59.668| assertion failed: MemBuf.cc:383: new_cap (size_t) capacity Program received signal SIGABRT, Aborted. [Switching to Thread 0x801002180 (LWP 100583)] 0x000800e198bc in thr_kill () from /lib/libc.so.7 (gdb) bt #0 0x000800e198bc in thr_kill () from /lib/libc.so.7 #1 0x000800ea8a2b in abort () from /lib/libc.so.7 #2 0x0044483c in xassert (msg=Variable msg is not available. ) at debug.cc:574 #3 0x0048af27 in MemBuf::grow (this=0x8161fa958, min_cap=6) at MemBuf.cc:383 #4 0x0046dc98 in HttpStateData::maybeReadVirginBody (this=0x816570388) at MemBuf.h:63 #5 0x0046dd65 in HttpStateData::continueAfterParsingHeader (this=0x816570388) at http.cc:1052 #6 0x0046efdb in HttpStateData::readReply (this=0x816570388, len=31745, flag=COMM_OK, xerrno=0) at http.cc:1032 #7 0x004d28e4 in commio_call_callback (ccb=0x80204ec28) at comm.cc:207 #8 0x004d2978 in commio_call_callbacks () at comm.cc:217 #9 0x004d29aa in CommDispatcher::dispatch (this=Variable this is not available. ) at comm.cc:2537 #10 0x0044cf1e in EventLoop::runOnce (this=0x7fffeb40) at EventLoop.cc:131 #11 0x0044d068 in EventLoop::run (this=0x7fffeb40) at EventLoop.cc:100 #12 0x00488366 in main (argc=Variable argc is not available. ) at main.cc:1334 (gdb)
Re: [squid-users] CISCO + WCCP Stopping forward packets
Hello all. I again. In last week I updated my Cisco IOS to a Release T, but the problem continues. Then I decid back to a old IOS - 12.4.-23 - , and update my Squid to branch 3, more exactly version 3.15. The problems that Stop Forward Packet, aparently disappeared. Or better, the problem continues, but squid register again, and traffic not stopping. So I belive that the Cisco is not the Problem, but is the Squid. Comparing files wccp2.c between 2 versions, I see a lot of changes. In short, my current situation is: I have 4 Squid's registering on a Cisco 2811. From time to time, the squid's turn it off then register again. Is working, but I believe that this is not correct way. Regards. Alex Montoanelli Administração e Gerência de Redes Unetvale Conectividade +55 48 3263 8700 On Fri, May 8, 2009 at 12:42 PM, Ritter, Nicholas nicholas.rit...@americantv.com wrote: My experience has been, and my local cisco field engineers were the ones who told me this, that you should always use the T train of IOS releases. -Original Message- From: alexmontoane...@gmail.com [mailto:alexmontoane...@gmail.com] On Behalf Of Alex Montoanelli Sent: Friday, May 08, 2009 8:29 AM To: squid-users Subject: Re: [squid-users] CISCO + WCCP Stopping forward packets Hi all. This problem appeared when I started to use more than one Squid to regiter on wccp/cisco. In the past, where I just use one squid, this not the case. Browsing the Web site cisco, I found this on Cisco IOS Changelog: http://www.cisco.com/en/US/docs/ios/12_4/release/notes/124MCAVS.html#wp280492 - Resolved Caveats-Cisco IOS Release 12.4(21) This section describes possibly unexpected behavior by Cisco IOS Release 12.4(21). All the caveats listed in this section are resolved in Cisco IOS Release 12.4(21). * CSCsm12247 Symptoms: A Cisco IOS router configured for WCCP may stop redirecting traffic following a change in topology. Conditions: The router must be configured for WCCP redirection using the hash assignment method. When there is only a single appliance in the service group, the loss of hash assignment details is permanent. However with multiple appliances in the group, the loss of assignment information is transitory; the router soon recovers. Workaround: To recover the assignment details, the WCCP configuration needs to be removed and re-added to the router. Use the no ip wccp service command followed by ip wccp service args command. Additional Information: The changes address also situation where some wccp clients are sending modified weight field in the wccp message and this way create a topology change situation. -- I upgraded to IOS 12.4.(23), but problems remain. What you think to migrate to the IOS release T ? Anyone has using more than one Squid registered on the same router? Regards Alex On Mon, May 4, 2009 at 9:08 PM, Ritter, Nicholas nicholas.rit...@americantv.com wrote: Yuplooks like an IOS related problemtry a different release of IOS. -Original Message- From: alexmontoane...@gmail.com on behalf of Alex Montoanelli Sent: Mon 5/4/2009 4:00 PM To: squid-users Subject: Re: [squid-users] CISCO + WCCP Stopping forward packets Hi, after a day works fine, the problem appear. I see the HereIAm and ISeeYou packets between Cisco and Squid, above is the logs of both. I have 4 Instances of Squid, running on the same machine, I just shutdown 3 of then, and start again, and every one go to normal. The fourth instance back to normal without any touch. The *** mark, is the begin of trouble. --CISCO May 4 17:21:32 cliente-1-254.unetvale.com.br 240185: 240210: *May 4 21:23:36: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/ rcv_id 00091ACD May 4 17:21:37 cliente-1-254.unetvale.com.br 240188: 240213: *May 4 21:23:41: WCCP-PKT:S00: Received valid Here_I_Am packet from 200.193.10.141 w/rcv_id 00091ACB May 4 17:21:37 cliente-1-254.unetvale.com.br 240189: 240214: *May 4 21:23:41: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.141 w/ rcv_id 00091ACF May 4 17:21:41 cliente-1-254.unetvale.com.br 240190: 240215: *May 4 21:23:44: WCCP-PKT:S00: Received valid Here_I_Am packet from 200.193.10.143 w/rcv_id 00091ACC May 4 17:21:41 cliente-1-254.unetvale.com.br 240191: 240216: *May 4 21:23:44: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.143 w/ rcv_id 00091AD0 May 4 17:21:42 cliente-1-254.unetvale.com.br 240192: 240217: *May 4 21:23:46: WCCP-PKT:S00: Received valid Here_I_Am packet from 200.193.10.140 w/rcv_id 00091ACD May 4 17:21:42 cliente-1-254.unetvale.com.br 240193: 240218: *May 4 21:23:46: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/ rcv_id 00091AD1 May 4 17:22:31 cliente-1-254.unetvale.com.br 240244: 240269: *May 4 21:24:35: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.141 w/bad rcv_id
Re: [squid-users] CISCO + WCCP Stopping forward packets
Hi all. This problem appeared when I started to use more than one Squid to regiter on wccp/cisco. In the past, where I just use one squid, this not the case. Browsing the Web site cisco, I found this on Cisco IOS Changelog: http://www.cisco.com/en/US/docs/ios/12_4/release/notes/124MCAVS.html#wp280492 - Resolved Caveats—Cisco IOS Release 12.4(21) This section describes possibly unexpected behavior by Cisco IOS Release 12.4(21). All the caveats listed in this section are resolved in Cisco IOS Release 12.4(21). * CSCsm12247 Symptoms: A Cisco IOS router configured for WCCP may stop redirecting traffic following a change in topology. Conditions: The router must be configured for WCCP redirection using the hash assignment method. When there is only a single appliance in the service group, the loss of hash assignment details is permanent. However with multiple appliances in the group, the loss of assignment information is transitory; the router soon recovers. Workaround: To recover the assignment details, the WCCP configuration needs to be removed and re-added to the router. Use the no ip wccp service command followed by ip wccp service args command. Additional Information: The changes address also situation where some wccp clients are sending modified weight field in the wccp message and this way create a topology change situation. -- I upgraded to IOS 12.4.(23), but problems remain. What you think to migrate to the IOS release T ? Anyone has using more than one Squid registered on the same router? Regards Alex On Mon, May 4, 2009 at 9:08 PM, Ritter, Nicholas nicholas.rit...@americantv.com wrote: Yuplooks like an IOS related problemtry a different release of IOS. -Original Message- From: alexmontoane...@gmail.com on behalf of Alex Montoanelli Sent: Mon 5/4/2009 4:00 PM To: squid-users Subject: Re: [squid-users] CISCO + WCCP Stopping forward packets Hi, after a day works fine, the problem appear. I see the HereIAm and ISeeYou packets between Cisco and Squid, above is the logs of both. I have 4 Instances of Squid, running on the same machine, I just shutdown 3 of then, and start again, and every one go to normal. The fourth instance back to normal without any touch. The *** mark, is the begin of trouble. --CISCO May 4 17:21:32 cliente-1-254.unetvale.com.br 240185: 240210: *May 4 21:23:36: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/ rcv_id 00091ACD May 4 17:21:37 cliente-1-254.unetvale.com.br 240188: 240213: *May 4 21:23:41: WCCP-PKT:S00: Received valid Here_I_Am packet from 200.193.10.141 w/rcv_id 00091ACB May 4 17:21:37 cliente-1-254.unetvale.com.br 240189: 240214: *May 4 21:23:41: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.141 w/ rcv_id 00091ACF May 4 17:21:41 cliente-1-254.unetvale.com.br 240190: 240215: *May 4 21:23:44: WCCP-PKT:S00: Received valid Here_I_Am packet from 200.193.10.143 w/rcv_id 00091ACC May 4 17:21:41 cliente-1-254.unetvale.com.br 240191: 240216: *May 4 21:23:44: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.143 w/ rcv_id 00091AD0 May 4 17:21:42 cliente-1-254.unetvale.com.br 240192: 240217: *May 4 21:23:46: WCCP-PKT:S00: Received valid Here_I_Am packet from 200.193.10.140 w/rcv_id 00091ACD May 4 17:21:42 cliente-1-254.unetvale.com.br 240193: 240218: *May 4 21:23:46: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/ rcv_id 00091AD1 May 4 17:22:31 cliente-1-254.unetvale.com.br 240244: 240269: *May 4 21:24:35: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.141 w/bad rcv_id 00091ACB May 4 17:22:32 cliente-1-254.unetvale.com.br 240247: 240272: *May 4 21:24:36: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.140 w/bad rcv_id 00091AD1 May 4 17:23:27 cliente-1-254.unetvale.com.br 240310: 240335: *May 4 21:25:30: WCCP-PKT:S00: Received valid Here_I_Am packet from 200.193.10.143 w/rcv_id 00091AFE May 4 17:23:27 cliente-1-254.unetvale.com.br 240311: 240336: *May 4 21:25:30: WCCP-EVNT:S00: Assignment wait timer started May 4 17:23:31 cliente-1-254.unetvale.com.br 240314: 240339: *May 4 21:25:34: WCCP-EVNT:S00: Redirect_Assignment packet from 200.193.10.143 w/bad rcv_id 00091AFE May 4 17:24:54 cliente-1-254.unetvale.com.br 240378: 240403: *May 4 21:26:58: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.140 w/bad rcv_id 00091AD1 May 4 17:24:54 cliente-1-254.unetvale.com.br 240379: 240404: *May 4 21:26:58: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/ rcv_id 00091B24 May 4 17:25:34 cliente-1-254.unetvale.com.br 240419: 240444: *May 4 21:27:38: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/ rcv_id 00091B39 May 4 17:25:42 cliente-1-254.unetvale.com.br 240429: 240454: *May 4 21:27:46: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.141 w/bad rcv_id 00091ACB May 4 17:25:51 cliente-1-254.unetvale.com.br 240437: 240462: *May 4 21:27:55: WCCP-PKT:S00: Sending I_See_You
[squid-users] CISCO + WCCP Stopping forward packets
Hello all. I have a FreeBSD Box, running Squid Version 2.7.STABLE6-20090306, with WCCP2 features on, with my Cisco Router 2811. It's running fine, but after a few hours, the traffic is not forwarded from Cisco do Squid Box. I don't see any packet on gre0 and a 'show ip wccp' in Cisco, has not increment counters from redirected packets. In my logs (cisco e squid) I could not get nothing; someone has been there? Regards Alex Montoanelli
Re: [squid-users] CISCO + WCCP Stopping forward packets
0: 'http://wm-ttv-mirror01-mia.terra.com/kboing/439755.asf' 2009/05/04 17:21:33| httpProcessReplyHeader: Impossible keep-alive header from 'http://wm-ttv-mirror01-mia.terra.com/kboing/439755.asf' 2009/05/04 17:21:41| ctx: exit level 0 2009/05/04 17:21:41| wccp2HereIam: sending to service id 0 2009/05/04 17:21:41| Sending HereIam packet size 144 2009/05/04 17:21:41| Incoming WCCPv2 I_SEE_YOU length 264. 2009/05/04 17:21:41| Complete packet received 2009/05/04 17:21:41| Incoming WCCP2_I_SEE_YOU Received ID old=596685 new=596689. 2009/05/04 17:21:41| Cleaning out cache list 2009/05/04 17:21:41| checking cache list: (8c0ac1c8:8c0ac1c8) 2009/05/04 17:21:41| checking cache list: (8d0ac1c8:8c0ac1c8) 2009/05/04 17:21:41| checking cache list: (8e0ac1c8:8c0ac1c8) 2009/05/04 17:21:41| checking cache list: (8f0ac1c8:8c0ac1c8) 2009/05/04 17:21:41| Change not detected (2496 = 2496) 2009/05/04 17:21:44| ctx: enter level 0: 'http://br.msn.com/' 2009/05/04 17:21:44| httpProcessReplyHeader: Impossible keep-alive header from 'http://br.msn.com/' 2009/05/04 17:21:51| ctx: exit level 0 2009/05/04 17:21:51| wccp2HereIam: sending to service id 0 2009/05/04 17:21:51| Sending HereIam packet size 144 2009/05/04 17:22:01| wccp2HereIam: sending to service id 0 2009/05/04 17:22:01| Sending HereIam packet size 144 2009/05/04 17:22:11| wccp2HereIam: sending to service id 0 2009/05/04 17:22:11| Sending HereIam packet size 144 2009/05/04 17:22:21| wccp2HereIam: sending to service id 0 2009/05/04 17:22:21| Sending HereIam packet size 144 2009/05/04 17:22:25| CACHEMGR: unknown@10.100.0.101 requesting 'info' 2009/05/04 17:22:21| wccp2HereIam: sending to service id 0 2009/05/04 17:22:21| Sending HereIam packet size 144 2009/05/04 17:22:25| CACHEMGR: unknown@10.100.0.101 requesting 'info' 2009/05/04 17:22:25| CACHEMGR: unknown@10.100.0.101 requesting 'info' 2009/05/04 17:22:30| CACHEMGR: unknown@10.100.0.101 requesting 'counters' 2009/05/04 17:22:30| CACHEMGR: unknown@10.100.0.101 requesting 'info' 2009/05/04 17:22:31| wccp2HereIam: sending to service id 0 2009/05/04 17:22:31| Sending HereIam packet size 144 2009/05/04 17:22:41| wccp2HereIam: sending to service id 0 2009/05/04 17:22:41| Sending HereIam packet size 144 2009/05/04 17:22:51| wccp2HereIam: sending to service id 0 2009/05/04 17:22:51| Sending HereIam packet size 144 2009/05/04 17:23:01| wccp2HereIam: sending to service id 0 2009/05/04 17:23:01| Sending HereIam packet size 144 2009/05/04 17:23:11| wccp2HereIam: sending to service id 0 2009/05/04 17:23:11| Sending HereIam packet size 144 2009/05/04 17:23:26| wccp2HereIam: sending to service id 0 2009/05/04 17:23:26| Sending HereIam packet size 144 2009/05/04 17:24:33| wccp2HereIam: sending to service id 0 2009/05/04 17:24:33| Sending HereIam packet size 144 2009/05/04 17:24:43| wccp2HereIam: sending to service id 0 2009/05/04 17:24:43| Sending HereIam packet size 144 2009/05/04 17:24:53| wccp2HereIam: sending to service id 0 2009/05/04 17:24:53| Sending HereIam packet size 144 2009/05/04 17:25:03| wccp2HereIam: sending to service id 0 2009/05/04 17:25:03| Sending HereIam packet size 144 2009/05/04 17:25:13| wccp2HereIam: sending to service id 0 2009/05/04 17:25:13| Sending HereIam packet size 144 2009/05/04 17:25:23| wccp2HereIam: sending to service id 0 2009/05/04 17:25:23| Sending HereIam packet size 144 2009/05/04 17:25:33| wccp2HereIam: sending to service id 0 2009/05/04 17:25:33| Sending HereIam packet size 144 - Alex Montoanelli Administração e Gerência de Redes Unetvale Conectividade +55 48 3263 8700 On Mon, May 4, 2009 at 11:35 AM, Ritter, Nicholas nicholas.rit...@americantv.com wrote: I have not noticed other faqs requiring this, but make sure your iptables is allowing UDP port 2048 on the Ethernet and gre interfaces of the squid box and coming from the IP address listed in the sh ip wccp (the router identifier IP.) Also, update you IOS. The loss of the hello packets is the problem, but the reason behind the packet transmission loss is the mystery. You can try running a packet sniffer on the squid box to make sure it is sending the Here I am packets, are increase the debug level of squid to see them. My experience as been that the problem is on the Cisco side though. -Original Message- From: alexmontoane...@gmail.com [mailto:alexmontoane...@gmail.com] On Behalf Of Alex Montoanelli Sent: Monday, May 04, 2009 8:57 AM To: Ritter, Nicholas Subject: Re: [squid-users] CISCO + WCCP Stopping forward packets Hello Nicholas. When the service break down, the related fields, are not 0, is equal 1/1. ( 1 Client / 1 Router ). I have setting up a router to log to a syslog server, and when the issue occur, the packets/messages are not transmited. My router, a Cisco 2811 has running a 'flash:c2800nm-ipbase-mz.124-21.bin' / 12.4-21 IOS Version. On Mon, May 4, 2009 at 10:45 AM, Ritter, Nicholas nicholas.rit...@americantv.com wrote: Two things you can do: 1) When the wccp