[squid-users] log problem
I have calamaris running on a daily basis, parsing the log files. I have recently seen a problem with logging, I think since I updated to ver. 3.2.x. I see some weird characters on the "method" field, for example yesterday the calamaris log had 2 lines with "non readable" chars on the method column: Incoming requests by method: method request % Byte % sec kB/sec -- GET 57420 95.16 5744092K 99.86 20 4.92 POST 2029 3.36 7202213 0.12 0 5.50 HEAD 646 1.07 228642 0.00 0 2.58 PUT 230 0.38 543536 0.01 14 0.16 NONE 12 0.02 50775 0.00 0 41320.80 â‚S…›S.D>Õf…yÁv¢ž% 1 0.00 3776 0.00 0 36875.00 ñµbc 1 0.00 3614 0.00 0 35292.97 I verified that these lines with weird chars where present in the squid log file case by running the following command: $ sudo cat access.log.0 | awk '{print $6}' | sort | uniq ��bc GET HEAD NONE POST PUT ��S��S.D>�f�y�v��% As can be seen there are 2 instances of "non-printing" characters on field 6 of the log file. This means that squid in printing garbage on field 6 (method). Has anybody else seen this problem? Is this a (known and reported) bug? Clemente
Re: [squid-users] FATAL: dying from an unhandled exception: c
Em 16-01-2013 10:30, Kinkie escreveu: On Wed, Jan 16, 2013 at 11:07 AM, Clemente Aguiar wrote: Hello, Since I upgraded to version 3.2.x I am seeing this message in cache.log: FATAL: dying from an unhandled exception: c I am now running version 3.2.6. What I would like to know is, has somebody else is seen this too? Should I submit a bug report? Hi Clemente, can you paste a snippet of the cache.log, before and after that message? Thanks -- /kinkie In today's cache.log there are 2 FATAL messages: 2013/01/16 09:52:25 kid1| urlParse: URL too large (24886 bytes) 2013/01/16 09:53:14 kid1| urlParse: URL too large (24886 bytes) 2013/01/16 09:53:37 kid1| urlParse: URL too large (24886 bytes) 2013/01/16 09:54:12 kid1| FATAL: dying from an unhandled exception: c 2013/01/16 09:54:15 kid1| Starting Squid Cache version 3.2.6 for x86_64-pc-linux-gnu... 2013/01/16 09:54:15 kid1| Process ID 26745 2013/01/16 09:54:15 kid1| Process Roles: worker 2013/01/16 09:54:15 kid1| With 8192 file descriptors available 2013/01/16 09:54:15 kid1| Initializing IP Cache... 2013/01/16 09:54:15 kid1| DNS Socket created at 0.0.0.0, FD 7 .. 2013/01/16 09:54:29 kid1| Validated 1745265 Entries 2013/01/16 09:54:29 kid1| store_swap_size = 92334284.00 KB 2013/01/16 09:54:30 kid1| storeLateRelease: released 10 objects 2013/01/16 09:54:47 kid1| netdbExchangeHandleReply: corrupt data, aborting 2013/01/16 09:54:54 kid1| urlParse: URL too large (24886 bytes) 2013/01/16 09:55:58 kid1| urlParse: URL too large (24886 bytes) 2013/01/16 09:56:52 kid1| squidaio_queue_request: WARNING - Queue congestion 2013/01/16 09:59:57 kid1| urlParse: URL too large (24886 bytes) 2013/01/16 10:00:22 kid1| urlParse: URL too large (24886 bytes) 2013/01/16 10:00:38 kid1| FATAL: dying from an unhandled exception: c 2013/01/16 10:00:39| Pinger exiting. 2013/01/16 10:00:41 kid1| Starting Squid Cache version 3.2.6 for x86_64-pc-linux-gnu... 2013/01/16 10:00:41 kid1| Process ID 26868 2013/01/16 10:00:41 kid1| Process Roles: worker 2013/01/16 10:00:41 kid1| With 8192 file descriptors available 2013/01/16 10:00:41 kid1| Initializing IP Cache... 2013/01/16 10:00:41 kid1| DNS Socket created at 0.0.0.0, FD 7 ..
[squid-users] FATAL: dying from an unhandled exception: c
Hello, Since I upgraded to version 3.2.x I am seeing this message in cache.log: FATAL: dying from an unhandled exception: c I am now running version 3.2.6. What I would like to know is, has somebody else is seen this too? Should I submit a bug report? Clemente
Re: [squid-users] Squid 3.1 youtube caching
Qua, 2011-02-02 às 10:01 -0600, Luis Daniel Lucio Quiroz escreveu: > Le mercredi 2 février 2011 09:49:23, Clemente Aguiar a écrit : > > I am running squid 3.1.9, and I would like to know if this version is > > able to cache youtube content? > > > > I did check the wiki > > (http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube) > > and I must say that it is not clear what bits applies to version 3.1. > > > > Can somebody give me some pointers to what exactly I should configure. > > > > Thanks, > > Clemente > > Clemente, > > there is a non 100% sure probability because 3.1 laks 2.7 capabilities, the > only way for now is: > use 2.7 > user an ICAP server capable to manage those types of urls > > Regards, > > LD Ok, thanks. Maybe somebody should make that (perfectly) clear in the wiki ... and maybe add an example on how to implement ICAP server. Well, now for the next question. Which ICAP server and how to implement? Can you help me? Regards, Clemente
[squid-users] Squid 3.1 youtube caching
I am running squid 3.1.9, and I would like to know if this version is able to cache youtube content? I did check the wiki (http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube) and I must say that it is not clear what bits applies to version 3.1. Can somebody give me some pointers to what exactly I should configure. Thanks, Clemente
[squid-users] Cisco switches and cache interception and TPROXY
I am in the process of upgrading our network infrastructure. At present I have a Cisco Router and I have a working interception cache (Squid) using WCCPv2 protocol for this purpose. In this upgrade process, I am considering the use of Cisco Catalyst 3560 or 3750 switches instead of the router, but from the documentation, these switches support WCCPv2 but the are some unsupported WCCP features. The WCCP features that are not supported in the software release 12.2(52)SE are: - Packet redirection on an outbound interface that is configured by using the "ip wccp redirect out" interface configuration command. This command is not supported. - The GRE forwarding method for packet redirection is not supported. - The hash assignment method for load balancing is not supported. - There is no SNMP support for WCCP. Taking in consideration these unsupported features would it be possible to: 1) use Squid in "interception" mode? 2) use Squid in "TProxy interception" mode? Clemente
Re: [squid-users] config of squid to use external proxy
- Mensagem Original- De: Clemente Aguiar Para: Amos Jeffries Cc: squid-users@squid-cache.org Assunto: Re: [squid-users] config of squid to use external proxy Data: Thu, 28 Jan 2010 15:15:43 + Sex, 2010-01-29 às 03:32 +1300, Amos Jeffries escreveu: > Clemente Aguiar wrote: > > I want to config my transparent squid to use an external proxy (with > > user/password) authentication when accessing a specific set of sites. > > > > At present the situation is as follows: > > When I want to access a specific site, say www.example.com, I am > > required to set my browser proxy settings to use an external proxy, for > > instance proxy.external.com port 8080, and then I am required to enter a > > user and password. Basically the site www.example.com is only accessible > > through this proxy which is external to our site. > > > > On our site we have our own squid box configured as transparent cache > > (using WCCPv2), so what I would like is to be able to access > > www.example.com (transparently), i.e. without having to change my > > browser proxy settings. > > > > Can anybody help me with the squid config? > > > > Two possible solutions: > > 1) requires a single login using Basic auth to the parent. shared by all > users of the child proxy. >cache_peer login=Username:Password > > 2) permits for a variation of usernames, but Password is not > retrievable. Requires a helper that returns "OK user=Foo" when handed an > IP address and th parent proxy to accept the same password fro all users > (anonymous login with username tracking ) > >external_acl_type ... >cache_peer ... login=PASS > or >external_acl_type ... >cache_peer ... login=*:FixedPassword > > > Amos Thanks. I tried this and it seems to work. Is this correct? cache_peer proxy.external.com parent 8080 0 no-query login=user:pass acl example_acl dstdomain .example.com cache_peer_access proxy.external.com allow example_acl never_direct allow example_acl
[squid-users] config of squid to use external proxy
I want to config my transparent squid to use an external proxy (with user/password) authentication when accessing a specific set of sites. At present the situation is as follows: When I want to access a specific site, say www.example.com, I am required to set my browser proxy settings to use an external proxy, for instance proxy.external.com port 8080, and then I am required to enter a user and password. Basically the site www.example.com is only accessible through this proxy which is external to our site. On our site we have our own squid box configured as transparent cache (using WCCPv2), so what I would like is to be able to access www.example.com (transparently), i.e. without having to change my browser proxy settings. Can anybody help me with the squid config?
Re: [squid-users] Cannot access site - TCP_MISS/504
- Mensagem Original- De: jeff donovan Para: Clemente Aguiar Cc: squid-users@squid-cache.org Assunto: Re: [squid-users] Cannot access site - TCP_MISS/504 Data: Tue, 31 Mar 2009 21:04:59 -0400 On Mar 31, 2009, at 11:42 AM, Clemente Aguiar wrote: > Setup: Squid-3.0-STABLE13 transparent proxy using WCCPv2 > > When I try to access the site the URL http://sandbox.tagle.it I get a > time out message: > > --- > The following error was encountered while trying to retrieve the URL: > http://sandbox.tagle.it/ > >Connection to 72.27.230.81 failed. > > > The system returned: (110) Connection timed out > > The remote host or network may be down. Please try the request again. > --- > > and I get the following entry in the access.log: > > --- > 1238510098.006 179565 89.109.64.202 TCP_MISS/504 2413 GET > http://sandbox.tagle.it/ - DIRECT/72.27.230.81 text/html > --- > > If I bypass the squid box altogether it works, i.e. I get asked for > authentication. > > > What could be the problem? turn squid off and tell me if the server squid is running on can access http://sandbox.tagle.it Thank you for your tip. Actually it turned out that the server squid is running on could not access http://sandbox.tagle.it, not even ping the referred IP. After verification it seems that the problem is that the remote server (sandbox.tagle.it) is blocking the IP of our squid server.
[squid-users] Cannot access site - TCP_MISS/504
Setup: Squid-3.0-STABLE13 transparent proxy using WCCPv2 When I try to access the site the URL http://sandbox.tagle.it I get a time out message: --- The following error was encountered while trying to retrieve the URL: http://sandbox.tagle.it/ Connection to 72.27.230.81 failed. The system returned: (110) Connection timed out The remote host or network may be down. Please try the request again. --- and I get the following entry in the access.log: --- 1238510098.006 179565 89.109.64.202 TCP_MISS/504 2413 GET http://sandbox.tagle.it/ - DIRECT/72.27.230.81 text/html --- If I bypass the squid box altogether it works, i.e. I get asked for authentication. What could be the problem?
[squid-users] wccp and Cisco router identifier
I am in the process of installing a "transparent" squid cache using wcpp using a Cisco Router C2600 (IOS Version 12.2(46a)) Everything is working fine except there is something that I don't know how to change. The Cisco router identifier is the address that is used for GRE on the router. Our router has two FastEthernet interfaces, each configured with an IP, and the router chose one of the IPs at random as the Cisco router identifier. How can that be changed? (i.e. how can I force the Cisco router identifier to be a specific IP) I searched in this list and somebody said to use a loopback interface on the Cisco, that it would much more predictable as the wccpv2 routerid is then always loopback id. How is this done? Clemente