[squid-users] Fwd: What's means ? ERR_PRECONDITION_FAILED

2010-12-20 Thread Alex Montoanelli
Anyone know what is error : ERR_PRECONDITION_FAILED

This occure randomly on some request. Sometimes
on swf, sometimes on css files...

Bellow the requests and response headers..

Squid Version:
Squid Cache: Version 3.2.0.3

Best regards,


Request URL:
http://www.bradesco.com.br/html/img/tv/filme0.swf
Request Method: GET
Status Code: 412 Precondition Failed

Request Headers
Accept: */*
Accept-Charset:
ISO-8859-1,utf-8;q=0.7,*;q=0.3
Accept-Encoding: gzip,deflate,sdch
Accept-Language: pt-BR,en-US;q=0.8,en;q=0.6
Connection: keep-alive
Cookie: CKIDP=YWO4CLCF4aOjYyoPncP9Y5p+WNFY1292850798;
CTLNC=dzvo+cmywMdZd/sc3mKtTBhtxpNY05
Host: www.bradesco.com.br
If-Modified-Since: Thu, 16 Dec 2010 17:22:02 GMT
If-None-Match: 7396-4bab-4abca280
Referer: http://www.bradesco.com.br/html/swf/destaque.swf
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.10
(KHTML, like Gecko) Chrome/8.0.552.215 Safari/534.10

Response Headers

Age:1292873418
Connection:keep-alive
Content-Language: pt-br
Content-Length: 2678
Content-Type: text/html
Date: Mon, 20 Dec 2010 19:30:17 GMT
Mime-Version: 1.0
Server: squid
Vary: Accept-Language
Via: 1.1 cache1.unetvale.com.br (squid)
Warning: 113 cache1.unetvale.com.br (squid) This cache hit is still
fresh and more than 1 day old
X-Cache: HIT from cache1.unetvale.com.br
X-Squid-Error: ERR_PRECONDITION_FAILED 0


--
Alex Montoanelli
Analista de Sistemas
Unetvale Conectividade
+55 48 3263 8700
www.unetvale.net


[squid-users] TProxy + cache_peer parent

2010-10-15 Thread Alex Montoanelli
Hello everyone,

I have a box with Squid + WCCP + tproxy working well, they have two
squid process running.
One is the frontend registered in WCCP, serving small files from RAM
without disk cache, and another is a backend, not registered on WCCP,
used for large files cached on disk as father of the frontend.

When a request comes in the frontend and it makes the request to the
destination, the client ip is what arrives at the destination, but
when the frontend forwards the request to the backend (based on
cache_peer_access), IP arrives at the destination is no longer the
client, but the IP of the squid.
My question is, is there a way from a request reach the destination
forwarded by parent cache with the IP address of the original the
customer ?

Regards

--
Alex Montoanelli


[squid-users] Traffic Question

2009-08-24 Thread Alex Montoanelli
Hello all,

I have a network with around 2000 customers, all of them, passing by a Squid,
configured with WCCP on a Cisco Router.

I have configured too, my implementation of http://cachevideos.com/ -
my implementation is on Php - more little and fast.

Analyzing the Squid access logs, I see thousand of request  to the
file wlsetup-cvr.exe, from windows/live systems.

My question is for peoples that have a medium/big network, with many
Windows customers,  if this is normal.

Other observation is that the request are always partial, - 206 HTTP Code -

Regards

Alex Montoanelli
Unetvale


Re: [squid-users] Help, wccp on ubuntu

2009-06-08 Thread Alex Montoanelli
Hello Ketua,

You can't use REDIRECT target of iptables.

You need use DNAT --to-destination: IP_OF_ETHERNET:3128

If you redirect to localhost, the packets are silent droped.

Regards


 On Mon, Jun 8, 2009 at 12:43 AM, ketua kampung ke...@kampung.web.id wrote:

 Hi,

 I have problem to running up wccp on my squid.
 I follow the guide from
 http://wiki.squid-cache.org/SquidFaq/InterceptionProxy and
 http://www.digitalnerds.net/linux/transparent-squid-with-wccp/

 This is my system.

 i use ubuntu 8.04 64bit.
 squid 2.7stable6 (compile by myselft).

 r...@box:~# squid -v
 Squid Cache: Version 2.7.STABLE6
 configure options:  '--sysconfdir=/etc/squid' '--prefix=/usr' 
 '--enable-async-io' '--enable-removal-policies=lru,heap' 
 '--disable-delay-pools' '--enable-kill-parent-hack' '--enable-snmp'
  '--enable-default-err-language=English' '--enable-err-languages=English' 
 '--enable-cache-digests'
  '--enable-linux-netfilter' '--enable-gnuregex' '--enable-wccp' 
 '--disable-auth'


 in squid.conf, i configure http_port 3128 transparent and enable the wccp.


 ifconfig wccp0
 wccp0     Link encap:UNSPEC  HWaddr 
 77-5C-40-03-00-00-F9-A1-00-00-00-00-00-00-00-00
          inet addr:1.2.3.4  P-t-P:1.2.3.4  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP  MTU:1476  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

 r...@box:~# iptunnel
 gre0: gre/ip  remote any  local any  ttl inherit  nopmtudisc
 wccp0: gre/ip  remote 110.92.64.255  local 119.92.64.3  dev eth0  ttl inherit

 r...@box:~# cat /proc/sys/net/ipv4/ip_forward
 1


 r...@box:~# sysctl -a | grep rp_filter
 error: permission denied on key 'net.ipv4.route.flush'
 net.ipv4.conf.lo.rp_filter = 0
 net.ipv4.conf.lo.arp_filter = 0
 net.ipv4.conf.all.rp_filter = 0
 net.ipv4.conf.all.arp_filter = 0
 net.ipv4.conf.default.rp_filter = 0
 net.ipv4.conf.default.arp_filter = 0
 net.ipv4.conf.eth0.rp_filter = 0
 net.ipv4.conf.eth0.arp_filter = 0
 net.ipv4.conf.eth1.rp_filter = 0
 net.ipv4.conf.eth1.arp_filter = 0
 net.ipv4.conf.gre0.rp_filter = 0
 net.ipv4.conf.gre0.arp_filter = 0
 net.ipv4.conf.wccp0.rp_filter = 0
 net.ipv4.conf.wccp0.arp_filter = 0
 error: permission denied on key 'net.ipv6.route.flush'

 From my cisco, i can see my squid can comunicate wccp with cisco.
 RTR-INT-2811#sh ip wccp
 Global WCCP information:
    Router information:
        Router Identifier:                   110.92.64.255
        Protocol Version:                    1.0

    Service Identifier: web-cache
        Number of Service Group Clients:     1
        Number of Service Group Routers:     1
        Total Packets s/w Redirected:        89
          Process:                           0
          Fast:                              0
          CEF:                               89
        Redirect access-list:                -none-
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0

 terminal monitor
 debug ip wccp even
 *Jun  8 03:30:51.423: WCCP-PKT: Sending I_See_You packet to 110.92.64.3 w/ 
 rcvd_id 0296
 *Jun  8 03:31:01.427: WCCP-EVNT: Built I_See_You msg body w/1 usable web 
 caches, change # 000B
 *Jun  8 03:31:01.427: %WCCP-5-CACHEFOUND: Web Cache 110.92.64.3 acquired
 *Jun  8 03:31:01.427: WCCP-PKT: Received valid Here_I_Am packet from 
 110.92.64.3 w/rcvd_id 0296
 *Jun  8 03:31:01.427: WCCP-PKT: Sending I_See_You packet to 110.92.64.3 w/ 
 rcvd_id 0297
 *Jun  8 03:31:01.427: WCCP-EVNT: Built I_See_You msg body w/1 usable web 
 caches, change # 000C
 *Jun  8 03:31:01.427: WCCP-PKT: Received valid Assign_Buckets packet from 
 110.92.64.3 w/rcvd_id 0297
 *Jun  8 03:31:11.431: WCCP-PKT: Received valid Here_I_Am packet from 
 110.92.64.3 w/rcvd_id 0297
 *Jun  8 03:31:11.431: WCCP-PKT: Sending I_See_You packet to 110.92.64.3 w/ 
 rcvd_id 0298


 When i tcpdump on interface wccp0, i can see the paket flow from cisco to 
 server.
 r...@box:~# tcpdump -i wccp0 -n
 listening on wccp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
 10:34:42.461441 IP 110.92.65.5.41038  202.158.66.92.80: S 
 842039074:842039074(0) win 5840 mss 1380,sackOK,timestamp 240146036 
 0,nop,wscale 7
 10:34:45.453372 IP 110.92.65.5.41038  202.158.66.92.80: S 
 842039074:842039074(0) win 5840 mss 1380,sackOK,timestamp 240146336 
 0,nop,wscale 7
 10:34:51.453431 IP 110.92.65.5.41038  202.158.66.92.80: S 
 842039074:842039074(0) win 5840 mss 1380,sackOK,timestamp 240146936 
 0,nop,wscale 7
 10:35:03.453562 IP 110.92.65.5.41038  202.158.66.92.80: S 
 842039074:842039074(0) win 5840 mss 1380,sackOK,timestamp 240148136 
 0,nop,wscale 7
 10:35:27.453852 IP 110.92.65.5.41038  202.158.66.92.80: S 
 

[squid-users] assertion failed: MemBuf.cc:383: new_cap (size_t) capacity

2009-05-21 Thread Alex Montoanelli
Hello all.

I have a squid 3.0-15 running on a FreeBSD 7.1/64, with a average of
50 request/second.

Its running on a Dell PowerEdge 1950, with 8G/RAM - 2Xeon / 4cores - 2.3Ghz.

After a few hours in production the squid reload, with theses messages
in cachelog.

Bellow is a backtrace.

Anybody knows what is happening ?

Regards

2009/05/21 10:10:59.668| assertion failed: MemBuf.cc:383: new_cap 
(size_t) capacity
Program received signal SIGABRT, Aborted.
[Switching to Thread 0x801002180 (LWP 100583)]
0x000800e198bc in thr_kill () from /lib/libc.so.7
(gdb) bt
#0  0x000800e198bc in thr_kill () from /lib/libc.so.7
#1  0x000800ea8a2b in abort () from /lib/libc.so.7
#2  0x0044483c in xassert (msg=Variable msg is not available.
) at debug.cc:574
#3  0x0048af27 in MemBuf::grow (this=0x8161fa958, min_cap=6)
at MemBuf.cc:383
#4  0x0046dc98 in HttpStateData::maybeReadVirginBody
(this=0x816570388) at MemBuf.h:63
#5  0x0046dd65 in HttpStateData::continueAfterParsingHeader
(this=0x816570388) at http.cc:1052
#6  0x0046efdb in HttpStateData::readReply (this=0x816570388,
len=31745, flag=COMM_OK, xerrno=0) at http.cc:1032
#7  0x004d28e4 in commio_call_callback (ccb=0x80204ec28) at comm.cc:207
#8  0x004d2978 in commio_call_callbacks () at comm.cc:217
#9  0x004d29aa in CommDispatcher::dispatch (this=Variable
this is not available.
) at comm.cc:2537
#10 0x0044cf1e in EventLoop::runOnce (this=0x7fffeb40) at
EventLoop.cc:131
#11 0x0044d068 in EventLoop::run (this=0x7fffeb40) at
EventLoop.cc:100
#12 0x00488366 in main (argc=Variable argc is not available.
) at main.cc:1334
(gdb)


Re: [squid-users] CISCO + WCCP Stopping forward packets

2009-05-19 Thread Alex Montoanelli
Hello all. I again.

In last week I updated my Cisco IOS  to a Release T, but the problem continues.

Then I decid  back to a old IOS - 12.4.-23 - , and update my Squid to
branch 3, more exactly version 3.15.

The problems that Stop Forward Packet, aparently disappeared.

Or better, the problem continues, but squid register again, and
traffic not stopping.

So I belive that the Cisco is not the Problem, but is the Squid.

Comparing files wccp2.c between 2 versions, I see a lot of changes.

In short, my current situation is:

I have 4 Squid's registering  on a Cisco 2811.

From time to time, the squid's  turn it off then register again.
Is working, but I believe that this is not correct way.

Regards.

Alex Montoanelli
Administração e Gerência de Redes
Unetvale Conectividade
+55 48 3263 8700


On Fri, May 8, 2009 at 12:42 PM, Ritter, Nicholas
nicholas.rit...@americantv.com wrote:

 My experience has been, and my local cisco field engineers were the ones who 
 told me this, that you should always use the T train of IOS releases.

 -Original Message-
 From: alexmontoane...@gmail.com [mailto:alexmontoane...@gmail.com] On Behalf 
 Of Alex Montoanelli
 Sent: Friday, May 08, 2009 8:29 AM
 To: squid-users
 Subject: Re: [squid-users] CISCO + WCCP Stopping forward packets

 Hi all.

 This problem appeared when I started to use more than one Squid to
 regiter on wccp/cisco.

 In the past, where I just use one squid, this not the case.

 Browsing the Web site cisco, I found this on Cisco IOS Changelog:

 http://www.cisco.com/en/US/docs/ios/12_4/release/notes/124MCAVS.html#wp280492
 -
 Resolved Caveats-Cisco IOS Release 12.4(21)
 This section describes possibly unexpected behavior by Cisco IOS
 Release 12.4(21). All the caveats listed in this section are resolved
 in Cisco IOS Release 12.4(21).
 *
 CSCsm12247
 Symptoms: A Cisco IOS router configured for WCCP may stop redirecting
 traffic following a change in topology.
 Conditions: The router must be configured for WCCP redirection using
 the hash assignment method. When there is only a single appliance in
 the service group, the loss of hash assignment details is permanent.
 However with multiple appliances in the group, the loss of assignment
 information is transitory; the router soon recovers.
 Workaround: To recover the assignment details, the WCCP configuration
 needs to be removed and re-added to the router. Use the no ip wccp
 service command followed by ip wccp service args command.
 Additional Information: The changes address also situation where some
 wccp clients are sending modified weight field in the wccp message and
 this way create a topology change situation.
 --

 I upgraded to IOS 12.4.(23), but problems remain.

 What you think to migrate to the IOS release T ?

 Anyone has using more than one Squid registered on the same router?

 Regards

 Alex


 On Mon, May 4, 2009 at 9:08 PM, Ritter, Nicholas
 nicholas.rit...@americantv.com wrote:
  Yuplooks like an IOS related problemtry a different release of IOS.
 
 
  -Original Message-
  From: alexmontoane...@gmail.com on behalf of Alex Montoanelli
  Sent: Mon 5/4/2009 4:00 PM
  To: squid-users
  Subject: Re: [squid-users] CISCO + WCCP Stopping forward packets
 
  Hi, after a day works fine, the problem appear.
 
  I see the HereIAm and ISeeYou  packets between Cisco and Squid, above
  is the logs of both.
 
  I have 4 Instances of Squid, running on the same machine, I just
  shutdown 3 of then, and start again, and every one
  go to normal. The fourth instance back to normal without any touch.
 
 
  The *** mark, is the begin of trouble.
 
  --CISCO
  May  4 17:21:32 cliente-1-254.unetvale.com.br 240185: 240210: *May  4
  21:23:36: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/
  rcv_id 00091ACD
  May  4 17:21:37 cliente-1-254.unetvale.com.br 240188: 240213: *May  4
  21:23:41: WCCP-PKT:S00: Received valid Here_I_Am packet from
  200.193.10.141 w/rcv_id 00091ACB
  May  4 17:21:37 cliente-1-254.unetvale.com.br 240189: 240214: *May  4
  21:23:41: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.141 w/
  rcv_id 00091ACF
  May  4 17:21:41 cliente-1-254.unetvale.com.br 240190: 240215: *May  4
  21:23:44: WCCP-PKT:S00: Received valid Here_I_Am packet from
  200.193.10.143 w/rcv_id 00091ACC
  May  4 17:21:41 cliente-1-254.unetvale.com.br 240191: 240216: *May  4
  21:23:44: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.143 w/
  rcv_id 00091AD0
  May  4 17:21:42 cliente-1-254.unetvale.com.br 240192: 240217: *May  4
  21:23:46: WCCP-PKT:S00: Received valid Here_I_Am packet from
  200.193.10.140 w/rcv_id 00091ACD
  May  4 17:21:42 cliente-1-254.unetvale.com.br 240193: 240218: *May  4
  21:23:46: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/
  rcv_id 00091AD1
  May  4 17:22:31 cliente-1-254.unetvale.com.br 240244: 240269: *May  4
  21:24:35: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.141 w/bad
  rcv_id

Re: [squid-users] CISCO + WCCP Stopping forward packets

2009-05-08 Thread Alex Montoanelli
Hi all.

This problem appeared when I started to use more than one Squid to
regiter on wccp/cisco.

In the past, where I just use one squid, this not the case.

Browsing the Web site cisco, I found this on Cisco IOS Changelog:

http://www.cisco.com/en/US/docs/ios/12_4/release/notes/124MCAVS.html#wp280492
-
Resolved Caveats—Cisco IOS Release 12.4(21)
This section describes possibly unexpected behavior by Cisco IOS
Release 12.4(21). All the caveats listed in this section are resolved
in Cisco IOS Release 12.4(21).
*
CSCsm12247
Symptoms: A Cisco IOS router configured for WCCP may stop redirecting
traffic following a change in topology.
Conditions: The router must be configured for WCCP redirection using
the hash assignment method. When there is only a single appliance in
the service group, the loss of hash assignment details is permanent.
However with multiple appliances in the group, the loss of assignment
information is transitory; the router soon recovers.
Workaround: To recover the assignment details, the WCCP configuration
needs to be removed and re-added to the router. Use the no ip wccp
service command followed by ip wccp service args command.
Additional Information: The changes address also situation where some
wccp clients are sending modified weight field in the wccp message and
this way create a topology change situation.
--

I upgraded to IOS 12.4.(23), but problems remain.

What you think to migrate to the IOS release T ?

Anyone has using more than one Squid registered on the same router?

Regards

Alex


On Mon, May 4, 2009 at 9:08 PM, Ritter, Nicholas
nicholas.rit...@americantv.com wrote:
 Yuplooks like an IOS related problemtry a different release of IOS.


 -Original Message-
 From: alexmontoane...@gmail.com on behalf of Alex Montoanelli
 Sent: Mon 5/4/2009 4:00 PM
 To: squid-users
 Subject: Re: [squid-users] CISCO + WCCP Stopping forward packets

 Hi, after a day works fine, the problem appear.

 I see the HereIAm and ISeeYou  packets between Cisco and Squid, above
 is the logs of both.

 I have 4 Instances of Squid, running on the same machine, I just
 shutdown 3 of then, and start again, and every one
 go to normal. The fourth instance back to normal without any touch.


 The *** mark, is the begin of trouble.

 --CISCO
 May  4 17:21:32 cliente-1-254.unetvale.com.br 240185: 240210: *May  4
 21:23:36: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/
 rcv_id 00091ACD
 May  4 17:21:37 cliente-1-254.unetvale.com.br 240188: 240213: *May  4
 21:23:41: WCCP-PKT:S00: Received valid Here_I_Am packet from
 200.193.10.141 w/rcv_id 00091ACB
 May  4 17:21:37 cliente-1-254.unetvale.com.br 240189: 240214: *May  4
 21:23:41: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.141 w/
 rcv_id 00091ACF
 May  4 17:21:41 cliente-1-254.unetvale.com.br 240190: 240215: *May  4
 21:23:44: WCCP-PKT:S00: Received valid Here_I_Am packet from
 200.193.10.143 w/rcv_id 00091ACC
 May  4 17:21:41 cliente-1-254.unetvale.com.br 240191: 240216: *May  4
 21:23:44: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.143 w/
 rcv_id 00091AD0
 May  4 17:21:42 cliente-1-254.unetvale.com.br 240192: 240217: *May  4
 21:23:46: WCCP-PKT:S00: Received valid Here_I_Am packet from
 200.193.10.140 w/rcv_id 00091ACD
 May  4 17:21:42 cliente-1-254.unetvale.com.br 240193: 240218: *May  4
 21:23:46: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/
 rcv_id 00091AD1
 May  4 17:22:31 cliente-1-254.unetvale.com.br 240244: 240269: *May  4
 21:24:35: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.141 w/bad
 rcv_id 00091ACB
 May  4 17:22:32 cliente-1-254.unetvale.com.br 240247: 240272: *May  4
 21:24:36: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.140 w/bad
 rcv_id 00091AD1
 May  4 17:23:27 cliente-1-254.unetvale.com.br 240310: 240335: *May  4
 21:25:30: WCCP-PKT:S00: Received valid Here_I_Am packet from
 200.193.10.143 w/rcv_id 00091AFE
 May  4 17:23:27 cliente-1-254.unetvale.com.br 240311: 240336: *May
  4 21:25:30: WCCP-EVNT:S00: Assignment wait timer started
 May  4 17:23:31 cliente-1-254.unetvale.com.br 240314: 240339: *May  4
 21:25:34: WCCP-EVNT:S00: Redirect_Assignment packet from
 200.193.10.143 w/bad rcv_id 00091AFE
 May  4 17:24:54 cliente-1-254.unetvale.com.br 240378: 240403: *May  4
 21:26:58: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.140 w/bad
 rcv_id 00091AD1
 May  4 17:24:54 cliente-1-254.unetvale.com.br 240379: 240404: *May  4
 21:26:58: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/
 rcv_id 00091B24
 May  4 17:25:34 cliente-1-254.unetvale.com.br 240419: 240444: *May  4
 21:27:38: WCCP-PKT:S00: Sending I_See_You packet to 200.193.10.140 w/
 rcv_id 00091B39
 May  4 17:25:42 cliente-1-254.unetvale.com.br 240429: 240454: *May  4
 21:27:46: WCCP-EVNT:S00: Here_I_Am packet from 200.193.10.141 w/bad
 rcv_id 00091ACB
 May  4 17:25:51 cliente-1-254.unetvale.com.br 240437: 240462: *May  4
 21:27:55: WCCP-PKT:S00: Sending I_See_You

[squid-users] CISCO + WCCP Stopping forward packets

2009-05-04 Thread Alex Montoanelli
Hello all.

I have a FreeBSD Box, running Squid Version 2.7.STABLE6-20090306, with
WCCP2 features on, with my Cisco Router 2811.

It's running fine, but after a few hours, the traffic is not forwarded
from Cisco do Squid Box.

I don't see any packet on gre0 and a 'show ip wccp' in Cisco, has not
increment counters from redirected packets.

In my logs (cisco e squid) I could not get nothing;

someone has been there?

Regards

Alex Montoanelli


Re: [squid-users] CISCO + WCCP Stopping forward packets

2009-05-04 Thread Alex Montoanelli
  0:
'http://wm-ttv-mirror01-mia.terra.com/kboing/439755.asf'
2009/05/04 17:21:33| httpProcessReplyHeader: Impossible keep-alive
header from 'http://wm-ttv-mirror01-mia.terra.com/kboing/439755.asf'
2009/05/04 17:21:41| ctx: exit level  0
2009/05/04 17:21:41| wccp2HereIam: sending to service id 0
2009/05/04 17:21:41| Sending HereIam packet size 144
2009/05/04 17:21:41| Incoming WCCPv2 I_SEE_YOU length 264.
2009/05/04 17:21:41| Complete packet received
2009/05/04 17:21:41| Incoming WCCP2_I_SEE_YOU Received ID old=596685 new=596689.
2009/05/04 17:21:41| Cleaning out cache list
2009/05/04 17:21:41| checking cache list: (8c0ac1c8:8c0ac1c8)
2009/05/04 17:21:41| checking cache list: (8d0ac1c8:8c0ac1c8)
2009/05/04 17:21:41| checking cache list: (8e0ac1c8:8c0ac1c8)
2009/05/04 17:21:41| checking cache list: (8f0ac1c8:8c0ac1c8)
2009/05/04 17:21:41| Change not detected (2496 = 2496)
2009/05/04 17:21:44| ctx: enter level  0: 'http://br.msn.com/'
2009/05/04 17:21:44| httpProcessReplyHeader: Impossible keep-alive
header from 'http://br.msn.com/'
2009/05/04 17:21:51| ctx: exit level  0
2009/05/04 17:21:51| wccp2HereIam: sending to service id 0
2009/05/04 17:21:51| Sending HereIam packet size 144
2009/05/04 17:22:01| wccp2HereIam: sending to service id 0
2009/05/04 17:22:01| Sending HereIam packet size 144
2009/05/04 17:22:11| wccp2HereIam: sending to service id 0
2009/05/04 17:22:11| Sending HereIam packet size 144
2009/05/04 17:22:21| wccp2HereIam: sending to service id 0
2009/05/04 17:22:21| Sending HereIam packet size 144
2009/05/04 17:22:25| CACHEMGR: unknown@10.100.0.101 requesting 'info'
2009/05/04 17:22:21| wccp2HereIam: sending to service id 0
2009/05/04 17:22:21| Sending HereIam packet size 144
2009/05/04 17:22:25| CACHEMGR: unknown@10.100.0.101 requesting 'info'
2009/05/04 17:22:25| CACHEMGR: unknown@10.100.0.101 requesting 'info'
2009/05/04 17:22:30| CACHEMGR: unknown@10.100.0.101 requesting 'counters'
2009/05/04 17:22:30| CACHEMGR: unknown@10.100.0.101 requesting 'info'
2009/05/04 17:22:31| wccp2HereIam: sending to service id 0
2009/05/04 17:22:31| Sending HereIam packet size 144
2009/05/04 17:22:41| wccp2HereIam: sending to service id 0
2009/05/04 17:22:41| Sending HereIam packet size 144
2009/05/04 17:22:51| wccp2HereIam: sending to service id 0
2009/05/04 17:22:51| Sending HereIam packet size 144
2009/05/04 17:23:01| wccp2HereIam: sending to service id 0
2009/05/04 17:23:01| Sending HereIam packet size 144
2009/05/04 17:23:11| wccp2HereIam: sending to service id 0
2009/05/04 17:23:11| Sending HereIam packet size 144
2009/05/04 17:23:26| wccp2HereIam: sending to service id 0
2009/05/04 17:23:26| Sending HereIam packet size 144
2009/05/04 17:24:33| wccp2HereIam: sending to service id 0
2009/05/04 17:24:33| Sending HereIam packet size 144
2009/05/04 17:24:43| wccp2HereIam: sending to service id 0
2009/05/04 17:24:43| Sending HereIam packet size 144
2009/05/04 17:24:53| wccp2HereIam: sending to service id 0
2009/05/04 17:24:53| Sending HereIam packet size 144
2009/05/04 17:25:03| wccp2HereIam: sending to service id 0
2009/05/04 17:25:03| Sending HereIam packet size 144
2009/05/04 17:25:13| wccp2HereIam: sending to service id 0
2009/05/04 17:25:13| Sending HereIam packet size 144
2009/05/04 17:25:23| wccp2HereIam: sending to service id 0
2009/05/04 17:25:23| Sending HereIam packet size 144
2009/05/04 17:25:33| wccp2HereIam: sending to service id 0
2009/05/04 17:25:33| Sending HereIam packet size 144
-


Alex Montoanelli
Administração e Gerência de Redes
Unetvale Conectividade
+55 48 3263 8700


On Mon, May 4, 2009 at 11:35 AM, Ritter, Nicholas
nicholas.rit...@americantv.com wrote:

 I have not noticed other faqs requiring this, but make sure your iptables is 
 allowing UDP port 2048 on the Ethernet and gre interfaces of the squid box 
 and coming from the IP address listed in the sh ip wccp (the router 
 identifier IP.)

 Also, update you IOS. The loss of the hello packets is the problem, but the 
 reason behind the packet transmission loss is the mystery. You can try 
 running a packet sniffer on the squid box to make sure it is sending the 
 Here I am packets, are increase the debug level of squid to see them.

 My experience as been that the problem is on the Cisco side though.

 -Original Message-
 From: alexmontoane...@gmail.com [mailto:alexmontoane...@gmail.com] On Behalf 
 Of Alex Montoanelli
 Sent: Monday, May 04, 2009 8:57 AM
 To: Ritter, Nicholas
 Subject: Re: [squid-users] CISCO + WCCP Stopping forward packets

 Hello Nicholas.

 When the service break down, the related fields, are not 0, is equal
 1/1. ( 1 Client / 1 Router ).

 I have setting up a router to log to a syslog server, and when the
 issue occur, the packets/messages are not transmited.

 My router, a Cisco 2811 has running a
 'flash:c2800nm-ipbase-mz.124-21.bin' / 12.4-21 IOS Version.

 On Mon, May 4, 2009 at 10:45 AM, Ritter, Nicholas
 nicholas.rit...@americantv.com wrote:
 
  Two things you can do:
 
  1) When the wccp