[squid-users] log problem

2013-01-28 Thread Clemente Aguiar

I have calamaris running on a daily basis, parsing the log files.

I have recently seen a problem with logging, I think since I updated to 
ver. 3.2.x.


I see some weird characters on the "method" field, for example yesterday 
the calamaris log had 2 lines with "non readable" chars on the method 
column:


Incoming requests by method:

method request % Byte % sec kB/sec
--
GET 57420 95.16 5744092K 99.86 20 4.92
POST 2029 3.36 7202213 0.12 0 5.50
HEAD 646 1.07 228642 0.00 0 2.58
PUT 230 0.38 543536 0.01 14 0.16
NONE 12 0.02 50775 0.00 0 41320.80
â‚S…›S.D>Õf…yÁv¢ž% 1 0.00 3776 0.00 0 36875.00
ñµbc 1 0.00 3614 0.00 0 35292.97


I verified that these lines with weird chars where present in the squid 
log file case by running the following command:


$ sudo cat access.log.0 | awk '{print $6}' | sort | uniq
��bc
GET
HEAD
NONE
POST
PUT
��S��S.D>�f�y�v��%

As can be seen there are 2 instances of "non-printing" characters on 
field 6 of the log file. This means that squid in printing garbage on 
field 6 (method).


Has anybody else seen this problem? Is this a (known and reported) bug?

Clemente


Re: [squid-users] FATAL: dying from an unhandled exception: c

2013-01-16 Thread Clemente Aguiar

Em 16-01-2013 10:30, Kinkie escreveu:

On Wed, Jan 16, 2013 at 11:07 AM, Clemente Aguiar
 wrote:

Hello,

Since I upgraded to version 3.2.x I am seeing this message in cache.log:
FATAL: dying from an unhandled exception: c

I am now running version 3.2.6.
What I would like to know is, has somebody else is seen this too?
Should I submit a bug report?


Hi Clemente, can you paste a snippet of the cache.log, before and
after that message?

Thanks


--
 /kinkie



In today's cache.log there are 2 FATAL messages:

2013/01/16 09:52:25 kid1| urlParse: URL too large (24886 bytes)
2013/01/16 09:53:14 kid1| urlParse: URL too large (24886 bytes)
2013/01/16 09:53:37 kid1| urlParse: URL too large (24886 bytes)
2013/01/16 09:54:12 kid1| FATAL: dying from an unhandled exception: c
2013/01/16 09:54:15 kid1| Starting Squid Cache version 3.2.6 for 
x86_64-pc-linux-gnu...

2013/01/16 09:54:15 kid1| Process ID 26745
2013/01/16 09:54:15 kid1| Process Roles: worker
2013/01/16 09:54:15 kid1| With 8192 file descriptors available
2013/01/16 09:54:15 kid1| Initializing IP Cache...
2013/01/16 09:54:15 kid1| DNS Socket created at 0.0.0.0, FD 7
..
2013/01/16 09:54:29 kid1|   Validated 1745265 Entries
2013/01/16 09:54:29 kid1|   store_swap_size = 92334284.00 KB
2013/01/16 09:54:30 kid1| storeLateRelease: released 10 objects
2013/01/16 09:54:47 kid1| netdbExchangeHandleReply: corrupt data, aborting
2013/01/16 09:54:54 kid1| urlParse: URL too large (24886 bytes)
2013/01/16 09:55:58 kid1| urlParse: URL too large (24886 bytes)
2013/01/16 09:56:52 kid1| squidaio_queue_request: WARNING - Queue congestion
2013/01/16 09:59:57 kid1| urlParse: URL too large (24886 bytes)
2013/01/16 10:00:22 kid1| urlParse: URL too large (24886 bytes)
2013/01/16 10:00:38 kid1| FATAL: dying from an unhandled exception: c
2013/01/16 10:00:39| Pinger exiting.
2013/01/16 10:00:41 kid1| Starting Squid Cache version 3.2.6 for 
x86_64-pc-linux-gnu...

2013/01/16 10:00:41 kid1| Process ID 26868
2013/01/16 10:00:41 kid1| Process Roles: worker
2013/01/16 10:00:41 kid1| With 8192 file descriptors available
2013/01/16 10:00:41 kid1| Initializing IP Cache...
2013/01/16 10:00:41 kid1| DNS Socket created at 0.0.0.0, FD 7
..


[squid-users] FATAL: dying from an unhandled exception: c

2013-01-16 Thread Clemente Aguiar

Hello,

Since I upgraded to version 3.2.x I am seeing this message in cache.log:
FATAL: dying from an unhandled exception: c

I am now running version 3.2.6.
What I would like to know is, has somebody else is seen this too?
Should I submit a bug report?

Clemente


Re: [squid-users] Squid 3.1 youtube caching

2011-02-02 Thread Clemente Aguiar
Qua, 2011-02-02 às 10:01 -0600, Luis Daniel Lucio Quiroz escreveu:
> Le mercredi 2 février 2011 09:49:23, Clemente Aguiar a écrit :
> > I am running squid 3.1.9, and I would like to know if this version is
> > able to cache youtube content?
> > 
> > I did check the wiki
> > (http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube)
> > and I must say that it is not clear what bits applies to version 3.1.
> > 
> > Can somebody give me some pointers to what exactly I should configure.
> > 
> > Thanks,
> > Clemente
> 
> Clemente,
> 
> there is a non 100% sure probability because 3.1 laks 2.7 capabilities, the 
> only way for now is:
> use 2.7
> user an ICAP server capable to manage those types of urls
> 
> Regards,
> 
> LD

Ok, thanks.

Maybe somebody should make that (perfectly) clear in the wiki ... and
maybe add an example on how to implement ICAP server.

Well, now for the next question. Which ICAP server and how to implement?
Can you help me?

Regards,
Clemente




[squid-users] Squid 3.1 youtube caching

2011-02-02 Thread Clemente Aguiar
I am running squid 3.1.9, and I would like to know if this version is
able to cache youtube content?

I did check the wiki
(http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube)
and I must say that it is not clear what bits applies to version 3.1.

Can somebody give me some pointers to what exactly I should configure.

Thanks,
Clemente



[squid-users] Cisco switches and cache interception and TPROXY

2010-02-04 Thread Clemente Aguiar
I am in the process of upgrading our network infrastructure.

At present I have a Cisco Router and I have a working interception cache
(Squid) using WCCPv2 protocol for this purpose.

In this upgrade process, I am considering the use of Cisco Catalyst 3560
or 3750 switches instead of the router, but from the documentation,
these switches support WCCPv2 but the are some unsupported WCCP
features.

The WCCP features that are not supported in the software release
12.2(52)SE are:
- Packet redirection on an outbound interface that is configured by
using the "ip wccp redirect out" interface configuration command. This
command is not supported.
- The GRE forwarding method for packet redirection is not supported.
- The hash assignment method for load balancing is not supported.
- There is no SNMP support for WCCP.

Taking in consideration these unsupported features would it be possible
to:

1) use Squid in "interception" mode?

2) use Squid in "TProxy interception" mode?

Clemente



Re: [squid-users] config of squid to use external proxy

2010-01-28 Thread Clemente Aguiar
- Mensagem Original-
De: Clemente Aguiar 
Para: Amos Jeffries 
Cc: squid-users@squid-cache.org
Assunto: Re: [squid-users] config of squid to use external proxy
Data: Thu, 28 Jan 2010 15:15:43 +

Sex, 2010-01-29 às 03:32 +1300, Amos Jeffries escreveu:
> Clemente Aguiar wrote:
> > I want to config my transparent squid to use an external proxy (with
> > user/password) authentication when accessing a specific set of sites.
> > 
> > At present the situation is as follows:
> > When I want to access a specific site, say www.example.com, I am
> > required to set my browser proxy settings to use an external proxy, for
> > instance proxy.external.com port 8080, and then I am required to enter a
> > user and password. Basically the site www.example.com is only accessible
> > through this proxy which is external to our site.
> > 
> > On our site we have our own squid box configured as transparent cache
> > (using WCCPv2), so what I would like is to be able to access
> > www.example.com (transparently), i.e. without having to change my
> > browser proxy settings.
> > 
> > Can anybody help me with the squid config?
> > 
> 
> Two possible solutions:
> 
> 1) requires a single login using Basic auth to the parent. shared by all 
> users of the child proxy.
>cache_peer  login=Username:Password
> 
> 2) permits for a variation of usernames, but Password is not 
> retrievable. Requires a helper that returns "OK user=Foo" when handed an 
> IP address and th parent proxy to accept the same password fro all users 
> (anonymous login with username tracking )
> 
>external_acl_type ...
>cache_peer ... login=PASS
> or
>external_acl_type ...
>cache_peer ... login=*:FixedPassword
> 
> 
> Amos

Thanks.

I tried this and it seems to work.
Is this correct?

cache_peer proxy.external.com parent 8080 0 no-query login=user:pass
acl example_acl dstdomain .example.com
cache_peer_access proxy.external.com allow example_acl
never_direct allow example_acl




[squid-users] config of squid to use external proxy

2010-01-28 Thread Clemente Aguiar
I want to config my transparent squid to use an external proxy (with
user/password) authentication when accessing a specific set of sites.

At present the situation is as follows:
When I want to access a specific site, say www.example.com, I am
required to set my browser proxy settings to use an external proxy, for
instance proxy.external.com port 8080, and then I am required to enter a
user and password. Basically the site www.example.com is only accessible
through this proxy which is external to our site.

On our site we have our own squid box configured as transparent cache
(using WCCPv2), so what I would like is to be able to access
www.example.com (transparently), i.e. without having to change my
browser proxy settings.

Can anybody help me with the squid config?



Re: [squid-users] Cannot access site - TCP_MISS/504

2009-04-01 Thread Clemente Aguiar

- Mensagem Original-

De: jeff donovan 
Para: Clemente Aguiar 
Cc: squid-users@squid-cache.org
Assunto: Re: [squid-users] Cannot access site - TCP_MISS/504
Data: Tue, 31 Mar 2009 21:04:59 -0400

On Mar 31, 2009, at 11:42 AM, Clemente Aguiar wrote:

> Setup: Squid-3.0-STABLE13 transparent proxy using WCCPv2
>
> When I try to access the site the URL http://sandbox.tagle.it I get a
> time out message:
>
> ---
> The following error was encountered while trying to retrieve the URL:
> http://sandbox.tagle.it/
>
>Connection to 72.27.230.81 failed.
>
>
> The system returned: (110) Connection timed out
>
> The remote host or network may be down. Please try the request again.
> ---
>
> and I get the following entry in the access.log:
>
> ---
> 1238510098.006 179565 89.109.64.202 TCP_MISS/504 2413 GET
> http://sandbox.tagle.it/ - DIRECT/72.27.230.81 text/html
> ---
>
> If I bypass the squid box altogether it works, i.e. I get asked for
> authentication.
>
>
> What could be the problem?

turn squid off and tell me if  the server squid is running on can  
access http://sandbox.tagle.it 



Thank you for your tip.

Actually it turned out that the server squid is running on could not 
access http://sandbox.tagle.it, not even ping the referred IP.

After verification it seems that the problem is that the remote server
(sandbox.tagle.it) is blocking the IP of our squid server.




[squid-users] Cannot access site - TCP_MISS/504

2009-03-31 Thread Clemente Aguiar
Setup: Squid-3.0-STABLE13 transparent proxy using WCCPv2

When I try to access the site the URL http://sandbox.tagle.it I get a
time out message:

---
The following error was encountered while trying to retrieve the URL:
http://sandbox.tagle.it/

Connection to 72.27.230.81 failed.


The system returned: (110) Connection timed out

The remote host or network may be down. Please try the request again.
---

and I get the following entry in the access.log:

---
1238510098.006 179565 89.109.64.202 TCP_MISS/504 2413 GET
http://sandbox.tagle.it/ - DIRECT/72.27.230.81 text/html
---

If I bypass the squid box altogether it works, i.e. I get asked for
authentication.


What could be the problem?



[squid-users] wccp and Cisco router identifier

2008-07-14 Thread Clemente Aguiar
I am in the process of installing a "transparent" squid cache using wcpp
using a Cisco Router C2600 (IOS Version 12.2(46a))

Everything is working fine except there is something that I don't know
how to change.

The Cisco router identifier is the address that is used for GRE on the
router. Our router has two FastEthernet interfaces, each configured
with an IP, and the router chose one of the IPs at random as the Cisco
router identifier. How can that be changed? (i.e. how can I force
the Cisco router identifier to be a specific IP) 

I searched in this list and somebody said to use a loopback interface on the 
Cisco,
that it would much more predictable as the wccpv2 routerid is then always 
loopback id.
How is this done?


Clemente