from:"Zeller, Jan"

[squid-users] squid-3.0.STABLE14 - assertion failed

2009-04-14 Thread Zeller, Jan


dear squid list,

after compiling squid-3.0.STABLE14 on GNU/Linux Debian Lenny 5.0.1 like

# ./squid -v
Squid Cache: Version 3.0.STABLE14
configure options:  '--prefix=/opt/squid-3.0.STABLE14' 
'--enable-icap-client' '--enable-ssl' 
'--enable-default-err-language=English' '--enable-err-languages=English' 
'--enable-linux-netfilter' '--with-pthreads' '--with-filedescriptors=32768'



the following problem occurs :
.
.
.
squid[26583]: assertion failed: HttpHeader.cc:1196: "Headers[id].type == 
ftInt64"

Squid Parent: child process 26583 exited due to signal 6
squid[14186]: Squid Parent: child process 26590 started
squid[26590]: Starting Squid Cache version 3.0.STABLE14 for 
x86_64-unknown-linux-gnu...

.
.
.
Version 1 of swap file without LFS support detected...
squid[26590]: Rebuilding storage in /squid3-cache (DIRTY)
squid[26590]: Using Least Load store dir selection
squid[26590]: Current Directory is /
.
.
.


# gcc -v
Using built-in specs.
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Debian 
4.3.2-1.1' --with-bugurl=file:///usr/share/doc/gcc-4.3/README.Bugs 
--enable-languages=c,c++,fortran,objc,obj-c++ --prefix=/usr 
--enable-shared --with-system-zlib --libexecdir=/usr/lib 
--without-included-gettext --enable-threads=posix --enable-nls 
--with-gxx-include-dir=/usr/include/c++/4.3 --program-suffix=-4.3 
--enable-clocale=gnu --enable-libstdcxx-debug --enable-objc-gc 
--enable-mpfr --enable-cld --enable-checking=release 
--build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu

Thread model: posix
gcc version 4.3.2 (Debian 4.3.2-1.1)

# uname -r
2.6.26-2-amd64

Any hints how to circumvent this problem ? squid-3.0.STABLE13 works 
(with the same configure options as mentioned above) perfectly.



--
kind regards,

Jan

Re: [squid-users] squid-3.0.STABLE14 - assertion failed

2009-04-14 Thread Zeller, Jan


Amos Jeffries wrote:

Zeller, Jan wrote:

dear squid list,

after compiling squid-3.0.STABLE14 on GNU/Linux Debian Lenny 5.0.1 like

# ./squid -v
Squid Cache: Version 3.0.STABLE14
configure options:  '--prefix=/opt/squid-3.0.STABLE14' 
'--enable-icap-client' '--enable-ssl' 
'--enable-default-err-language=English' '--enable-err-languages=English' 
'--enable-linux-netfilter' '--with-pthreads' '--with-filedescriptors=32768'



the following problem occurs :
.
.
.
squid[26583]: assertion failed: HttpHeader.cc:1196: "Headers[id].type == 
ftInt64"

Squid Parent: child process 26583 exited due to signal 6
squid[14186]: Squid Parent: child process 26590 started
squid[26590]: Starting Squid Cache version 3.0.STABLE14 for 
x86_64-unknown-linux-gnu...

.


Apologies. Looks like I missed out one small piece of a recent patch.

Does this attached patch (-p0) correct the issue?

Amos


Hi Amos,

your patch fixed the problem. Wonderful ! Thank you very much for your 
quick help !


--
kind regards,

Jan

[squid-users] squid-3.1.0.9 - error directory not created automatically

2009-06-30 Thread Zeller, Jan

dear list,

I compiled squid-3.1.0.9 like this :

$ squid -v
Squid Cache: Version 3.1.0.9
configure options:  '--prefix=/opt/squid-3.1.0.9' '--enable-icap-client' 
'--enable-ssl' '--enable-linux-netfilter' '--enable-http-violations' 
'--with-filedescriptors=32768' '--with-pthreads' '--disable-ipv6' 
--with-squid=/usr/local/src/squid-3.1.0.9 --enable-ltdl-convenience

Unfortunately there is no 'error' directory created !? Why ? squid-3.1.0.7 
created this directory automatically.
Should I explicitly download the language pack from 
http://www.squid-cache.org/Versions/langpack/ ?

kind regards,

Mit freundlichen Grüssen
---
Jan Zeller
Informatikdienste 
Universität Bern

AW: [squid-users] error compiling squid 3.0 stable 16

2009-07-01 Thread Zeller, Jan

Hi,

it seems that you've no krb.h

squid_kerb_auth.c:76:18: error: krb5.h: No such file or directory

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Gontzal [mailto:gontz...@gmail.com] 
Gesendet: Mittwoch, 1. Juli 2009 11:42
An: Squid-users
Betreff: [squid-users] error compiling squid 3.0 stable 16

Hello everybody!

I've a problem compiling squid 3.0 stable 16 on a opensuse 10.3 box.
These are my configure options:

./configure --prefix=/usr --sysconfdir=/etc/squid --bindir=/usr/sbin
--sbindir=/usr/sbin --localstatedir=/var --libexecdir=/usr/sbin
--datadir=/usr/share/squid --libdir=/usr/lib --with-dl
--sharedstatedir=/var/squid --enable-storeio=aufs,diskd,null,ufs
--enable-disk-io=AIO,Blocking,DiskDaemon,DiskThreads
--enable-removal-policies=heap,lru --enable-icmp --enable-delay-pools
--enable-http-violations --enable-esi --enable-icap-client
--enable-useragent-log --enable-referer-log --enable-kill-parent-hack
--enable-snmp --enable-arp-acl --enable-htcp --enable-ssl
--enable-forw-via-db --enable-cache-digests --enable-poll
--enable-linux-netfilter --with-large-files --enable-underscores
--enable-auth=basic,digest,ntlm,negotiate
--enable-basic-auth-helpers=DB,LDAP,MSNT,NCSA,POP3,SASL,SMB,YP,getpwnam,multi-domain-NTLM,squid_radius_auth
--enable-ntlm-auth-helpers=SMB,no_check,fakeauth
--enable-negotiate-auth-helpers=squid_kerb_auth
--enable-digest-auth-helpers=eDirectory,ldap,password
--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group
--enable-ntlm-fail-open --enable-stacktraces
--enable-x-accelerator-vary --with-default-user=squid

No problem when configuring. And this is the error when doing make:

Making all in squid_kerb_auth
make[3]: Entering directory
`/tmp/squid-3.0.STABLE16/helpers/negotiate_auth/squid_kerb_auth'
gcc -DHAVE_CONFIG_H -I. -I../../../include   -I./spnegohelp -I.   -m32
-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -Wall -g -O2 -MT
squid_kerb_auth.o -MD -MP -MF .deps/squid_kerb_auth.Tpo -c -o
squid_kerb_auth.o squid_kerb_auth.c
squid_kerb_auth.c:76:18: error: krb5.h: No such file or directory
squid_kerb_auth.c:77: error: expected â)â before âmajor_statusâ
squid_kerb_auth.c:133: error: expected â)â before âmajor_statusâ
squid_kerb_auth.c: In function âmainâ:
squid_kerb_auth.c:197: error: âOM_uint32â undeclared (first use in
this function)
squid_kerb_auth.c:197: error: (Each undeclared identifier is reported only once
squid_kerb_auth.c:197: error: for each function it appears in.)
squid_kerb_auth.c:197: error: expected â;â before âret_flagsâ
squid_kerb_auth.c:201: error: expected â;â before âmajor_statusâ
squid_kerb_auth.c:202: error: âgss_ctx_id_tâ undeclared (first use in
this function)
squid_kerb_auth.c:202: error: expected â;â before âgss_contextâ
squid_kerb_auth.c:203: error: âgss_name_tâ undeclared (first use in
this function)
squid_kerb_auth.c:203: error: expected â;â before âclient_nameâ
squid_kerb_auth.c:204: error: expected â;â before âserver_nameâ
squid_kerb_auth.c:205: error: âgss_cred_id_tâ undeclared (first use in
this function)
squid_kerb_auth.c:205: error: expected â;â before âserver_credsâ
squid_kerb_auth.c:206: error: expected â;â before âdelegated_credâ
squid_kerb_auth.c:207: error: âgss_buffer_descâ undeclared (first use
in this function)
squid_kerb_auth.c:207: error: expected â;â before âserviceâ
squid_kerb_auth.c:208: error: expected â;â before âinput_tokenâ
squid_kerb_auth.c:209: error: expected â;â before âoutput_tokenâ
squid_kerb_auth.c:245: error: âserviceâ undeclared (first use in this function)
squid_kerb_auth.c:286: warning: the address of âbufâ will always
evaluate as âtrueâ
squid_kerb_auth.c:303: warning: implicit declaration of function
âgss_release_bufferâ
squid_kerb_auth.c:303: error: âminor_statusâ undeclared (first use in
this function)
squid_kerb_auth.c:303: error: âinput_tokenâ undeclared (first use in
this function)
squid_kerb_auth.c:304: error: âoutput_tokenâ undeclared (first use in
this function)
squid_kerb_auth.c:306: warning: implicit declaration of function
âgss_release_credâ
squid_kerb_auth.c:306: error: âserver_credsâ undeclared (first use in
this function)
squid_kerb_auth.c:307: error: âdelegated_credâ undeclared (first use
in this function)
squid_kerb_auth.c:308: warning: implicit declaration of function
âgss_release_nameâ
squid_kerb_auth.c:308: error: âserver_nameâ undeclared (first use in
this function)
squid_kerb_auth.c:309: error: âclient_nameâ undeclared (first use in
this function)
squid_kerb_auth.c:310: warning: implicit declaration of function
âgss_delete_sec_contextâ
squid_kerb_auth.c:310: error: âgss_contextâ undeclared (first use in
this function)
squid_kerb_auth.c:313: error: âspnego_flagâ undeclared (first use in
this function)
squid_kerb_auth.c:341: error: âGSS_C_NO_CONTEXTâ undeclared (first use
in this function)
squid_kerb_auth.c:400: error: âmajor_statusâ undeclared (first use in
this function)
squid_kerb_auth.c:400: warning: implicit declaration of function
âgss_import_nameâ
squid_k

AW: [squid-users] squid-3.1.0.9 - error directory not created automatically

2009-07-02 Thread Zeller, Jan

Thank you Amos that works ! 
But now squid-3.1.0.9 produces nearly every second this message :

squid[6609]: IpIntercept.cc(137) NetfilterInterception:  
NF getsockopt(SO_ORIGINAL_DST) failed on FD 403: (92) Protocol not available

squid-3.1.0.7 didn't ? Is this message harmless ? I think so...
But how can I prevent squid from filling up my log ?

(acts at the same time as "normal" and transparent proxy
squid.conf
...
http_port 80 connection-auth=on
http_port 8080 intercept
...
)

kind regards,
---
Jan

-Ursprüngliche Nachricht-
Von: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Gesendet: Donnerstag, 2. Juli 2009 03:20
An: Zeller, Jan
Cc: squid-users@squid-cache.org
Betreff: Re: [squid-users] squid-3.1.0.9 - error directory not created 
automatically

On Wed, 1 Jul 2009 08:55:25 +0200, "Zeller, Jan" 
wrote:
> dear list,
> 
> I compiled squid-3.1.0.9 like this :
> 
> $ squid -v
> Squid Cache: Version 3.1.0.9
> configure options:  '--prefix=/opt/squid-3.1.0.9' '--enable-icap-client'
> '--enable-ssl' '--enable-linux-netfilter' '--enable-http-violations'
> '--with-filedescriptors=32768' '--with-pthreads' '--disable-ipv6'
> --with-squid=/usr/local/src/squid-3.1.0.9 --enable-ltdl-convenience
> 
> Unfortunately there is no 'error' directory created !? Why ?
squid-3.1.0.7
> created this directory automatically.
> Should I explicitly download the language pack from
> http://www.squid-cache.org/Versions/langpack/ ?
> 
> kind regards,

Small muckup changing the install locations.  I'm aware of and working on
this.
Yes, the langpack download+install would be a good work-around.

Amos

AW: AW: [squid-users] squid-3.1.0.9 - error directory not created automatically

2009-07-08 Thread Zeller, Jan

Sorry Henrik for my lack of knowledge here. But on the squid box I have done 
this :

$ iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 80 -j REDIRECT --to-port 
8080
$ iptables -t nat -vL
Chain PREROUTING (policy ACCEPT 885 packets, 49584 bytes)
pkts bytes target prot opt in out source   destination  
   
   0 0 REDIRECT   tcp  --  eth0   any anywhere anywhere 
   tcp dpt:www redir ports 8080

Chain POSTROUTING (policy ACCEPT 59 packets, 3777 bytes)
pkts bytes target prot opt in out source   destination
   
Chain OUTPUT (policy ACCEPT 59 packets, 3777 bytes)
pkts bytes target prot opt in out source   destination



The gw/router rule is done by :

# iptables -t mangle -A PREROUTING -i eth1 -j MARK --set-mark 2 -p tcp --dport 
80
# iptables -t mangle -vL PREROUTING
 Chain PREROUTING (policy ACCEPT 122K packets, 49M bytes)
 pkts bytes target prot opt in out source   destination 

  553 61889 MARK   tcp  --  eth1   any anywhere anywhere
tcp dpt:www MARK xset 0x2/0x

# ip rule add fwmark 2 table 2
# ip rule show
 0: from all lookup local 
 32765: from all fwmark 0x2 lookup 2 
 32766: from all lookup main 
 32767: from all lookup default 

# ip r a default via 192.168.1.10 dev eth2 table 2
# ip route sh table 2
 default via 192.168.1.10 dev eth2

Where 192.168.1.10 is the IP address of the squidbox. Anyway it works well 
despite of the warnings.

Thanks

Jan

-Ursprüngliche Nachricht-
Von: Henrik Nordstrom [mailto:hen...@henriknordstrom.net] 
Gesendet: Mittwoch, 8. Juli 2009 02:22
An: Zeller, Jan
Cc: squid-users@squid-cache.org
Betreff: Re: AW: [squid-users] squid-3.1.0.9 - error directory not created 
automatically

fre 2009-07-03 klockan 08:30 +0200 skrev Zeller, Jan:
> Thank you Amos that works ! 
> But now squid-3.1.0.9 produces nearly every second this message :
> 
> squid[6609]: IpIntercept.cc(137) NetfilterInterception:  
> NF getsockopt(SO_ORIGINAL_DST) failed on FD 403: (92) Protocol not available

This error indicates that your Squid is configured for
Netfilter/Iptables transparent interception, but there apparently is no
netfilter NAT rules installed on the server.. (NAT engine not loaded in
kernel).

How have you done your transparent interception?

Regards
Henrik

AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-20 Thread Zeller, Jan

Hi Amos,

tried to compile Squid 3.1.0.11 beta but it unfortunately failed for reasons I 
ignore :

$ lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:Debian GNU/Linux 5.0.2 (lenny)
Release:5.0.2
Codename:   lenny

$ uname -r
2.6.26-2-amd64

$ gcc -v
Using built-in specs.
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Debian 4.3.2-1.1' 
--with-bugurl=file:///usr/share/doc/gcc-4.3/README.Bugs 
--enable-languages=c,c++,fortran,objc,obj-c++ --prefix=/usr --enable-shared 
--with-system-zlib --libexecdir=/usr/lib --without-included-gettext 
--enable-threads=posix --enable-nls --with-gxx-include-dir=/usr/include/c++/4.3 
--program-suffix=-4.3 --enable-clocale=gnu --enable-libstdcxx-debug 
--enable-objc-gc --enable-mpfr --enable-cld --enable-checking=release 
--build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu
Thread model: posix
gcc version 4.3.2 (Debian 4.3.2-1.1)


$ make 
.
.
.
cc1plus: warnings being treated as errors
client_side.cc: In function 'int 
connKeepReadingIncompleteRequest(ConnStateData*)':
client_side.cc:2225: error: comparison between signed and unsigned integer 
expressions
depbase=`echo clientStream.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
g++ -DHAVE_CONFIG_H 
-DDEFAULT_CONFIG_FILE=\"/opt/squid-3.1.0.11/etc/squid.conf\" 
-DDEFAULT_SQUID_DATA_DIR=\"/opt/squid-3.1.0.11/share\" 
-DDEFAULT_SQUID_CONFIG_DIR=\"/opt/squid-3.1.0.11/etc\"  -I.. -I../include 
-I../src -I../include -I../lib -I../src   -Werror -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments  -D_REENTRANT -g -O2 -MT clientStream.o -MD -MP -MF 
$depbase.Tpo -c -o clientStream.o clientStream.cc &&\
mv -f $depbase.Tpo $depbase.Po
make[3]: *** [client_side.o] Error 1
make[3]: *** Waiting for unfinished jobs
make[3]: Leaving directory `/usr/local/src/squid-3.1.0.11/src'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/usr/local/src/squid-3.1.0.11/src'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/usr/local/src/squid-3.1.0.11/src'
make: *** [all-recursive] Error 1

src/client_side.cc
2219 int
2220 connKeepReadingIncompleteRequest(ConnStateData * conn)
2221 {
 // when we read chunked requests, the entire body is buffered
2223 // XXX: this check ignores header size and its limits.
2224 if (conn->in.dechunkingState == ConnStateData::chunkParsing)
2225 return conn->in.notYetUsed < Config.maxChunkedRequestBodySize;
2226 
2227 return conn->in.notYetUsed >= Config.maxRequestHeaderSize ? 0 : 1;
2228 }

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Gesendet: Sonntag, 19. Juli 2009 08:13
An: squid-annou...@squid-cache.org; Squid
Betreff: [squid-users] Squid 3.1.0.11 beta is available

The Squid HTTP Proxy team is very pleased to announce the
availability of the Squid-3.1.0.11 beta release!


Amos Jeffries

AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-20 Thread Zeller, Jan

Hi Amos,

thank you very much for your patch ! Great ! 
Applied it like this :

$ patch -p0 < b9052.patch 
patching file src/client_side.cc
Hunk #1 succeeded at  (offset 81 lines).

$ make && make install - this time is successful but now I get :

squid-3.1.0.11/sbin# ./squid -k check -f /etc/squid3/squid.conf-3.1.0.11 
2009/07/20 14:38:43| assertion failed: mem.cc:236: "size == 
StrPoolsAttrs[i].obj_size"
Aborted

Any ideas ?

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Gesendet: Montag, 20. Juli 2009 12:27
An: Zeller, Jan
Cc: squid-users@squid-cache.org
Betreff: Re: AW: [squid-users] Squid 3.1.0.11 beta is available

Zeller, Jan wrote:
> Hi Amos,
> 
> tried to compile Squid 3.1.0.11 beta but it unfortunately failed for reasons 
> I ignore :
> 


> .
> cc1plus: warnings being treated as errors
> client_side.cc: In function 'int 
> connKeepReadingIncompleteRequest(ConnStateData*)':
> client_side.cc:2225: error: comparison between signed and unsigned integer 
> expressions
> depbase=`echo clientStream.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
>   g++ -DHAVE_CONFIG_H 
> -DDEFAULT_CONFIG_FILE=\"/opt/squid-3.1.0.11/etc/squid.conf\" 
> -DDEFAULT_SQUID_DATA_DIR=\"/opt/squid-3.1.0.11/share\" 
> -DDEFAULT_SQUID_CONFIG_DIR=\"/opt/squid-3.1.0.11/etc\"  -I.. -I../include 
> -I../src -I../include -I../lib -I../src   -Werror -Wall -Wpointer-arith 
> -Wwrite-strings -Wcomments  -D_REENTRANT -g -O2 -MT clientStream.o -MD -MP 
> -MF $depbase.Tpo -c -o clientStream.o clientStream.cc &&\
>   mv -f $depbase.Tpo $depbase.Po
> make[3]: *** [client_side.o] Error 1
> make[3]: *** Waiting for unfinished jobs

> 
> kind regards,
> 
> Jan

Oh dear. It appears this patch was overlooked on the 3.1 merge.
http://www.squid-cache.org/Versions/v3/3.0/changesets/b9052.patch

That has now been fixed.

Amos
-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE16
   Current Beta Squid 3.1.0.10

AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Zeller, Jan

Hi Amos,

I entered this :

# gdb --args ./squid -NCXd9

and got this :

GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(gdb) bt
No stack.

hmmm...am I doing something wrong ?

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Gesendet: Dienstag, 21. Juli 2009 10:00
An: Zeller, Jan
Cc: squid-users@squid-cache.org
Betreff: Re: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

Zeller, Jan wrote:
> Hi Amos,
> 
> thank you very much for your patch ! Great ! 
> Applied it like this :
> 
> $ patch -p0 < b9052.patch 
> patching file src/client_side.cc
> Hunk #1 succeeded at  (offset 81 lines).
> 
> $ make && make install - this time is successful but now I get :
> 
> squid-3.1.0.11/sbin# ./squid -k check -f /etc/squid3/squid.conf-3.1.0.11 
> 2009/07/20 14:38:43| assertion failed: mem.cc:236: "size == 
> StrPoolsAttrs[i].obj_size"
> Aborted
> 
> Any ideas ?

Thats a new one.

Can you run squid under a debugger and get a stack trace of where thats 
happening?
ie:  gdb squid --args -NCXd9bt

Amos
-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE16
   Current Beta Squid 3.1.0.10 or 3.1.0.11

AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Zeller, Jan

No problem Amos I consulted the man gdb ;) and I also tried "run" in the gdb 
console but there is still the "No stack" message ...?

(gdb) run -NXCd9
.
.
.
2009/07/21 12:00:43.919| assertion failed: mem.cc:236: "size == 
StrPoolsAttrs[i].obj_size"
Program exited with code 01.
(gdb) bt
No stack.
(gdb) quit

Do you need all the other stuff right from the start ?

kind regards,

Jan


-Ursprüngliche Nachricht-
Von: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Gesendet: Dienstag, 21. Juli 2009 11:57
An: Zeller, Jan
Cc: squid-users@squid-cache.org
Betreff: Re: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

Zeller, Jan wrote:
> Hi Amos,
> 
> I entered this :
> 
> # gdb --args ./squid -NCXd9
> 
> and got this :
> 
> GNU gdb 6.8-debian
> Copyright (C) 2008 Free Software Foundation, Inc.
> License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
> and "show warranty" for details.
> This GDB was configured as "x86_64-linux-gnu"...
> (gdb) bt
> No stack.
> 
> hmmm...am I doing something wrong ?

Sorry my fault.

gdb --args squid -NCXd9
.
(gdb) run

"bt" is after the crash to display.



-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE16
   Current Beta Squid 3.1.0.10 or 3.1.0.11

AW: AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

2009-07-21 Thread Zeller, Jan

Hi Amos,

I now explicitly enabled 

--enable-stacktraces Enable automatic call backtrace on fatal errors

during the build and added CFLAGS="-g -ggdb" in front of ./configure 
but the result seems to be the same...

# ./squid -v
Squid Cache: Version 3.1.0.11
configure options:  '--prefix=/opt/squid-3.1.0.11' '--enable-icap-client' 
'--enable-ssl' '--enable-linux-netfilter' '--disable-ipv6' 
'--disable-translation' '--disable-auto-locale' '--with-pthreads' 
'--with-filedescriptors=32768' '--enable-stacktraces' 'CFLAGS=-g -ggdb' 
--with-squid=/usr/local/src/squid-3.1.0.11 --enable-ltdl-convenience
2009/07/21 15:43:50| assertion failed: mem.cc:236: "size == 
StrPoolsAttrs[i].obj_size"
Aborted

# gdb --args ./squid -NCXd9
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(gdb) bt
No stack.
(gdb) quit

I also followed the guidelines on 
http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-b09c6d3a618b5b8aca46a10bd1c5d88c38375ed2

# nm ./squid |head
00959d00 B AS_tree_head
00965740 B AclMatchedName
 U BIO_ctrl@@OPENSSL_0.9.8
 U BIO_free@@OPENSSL_0.9.8
 U BIO_new@@OPENSSL_0.9.8
 U BIO_new_file@@OPENSSL_0.9.8
 U BIO_s_mem@@OPENSSL_0.9.8
008580d8 D Biggest_FD
005fb168 R CacheDigestHashFuncCount
008cf880 B CcFieldsInfo

What am I doing wrong here ?

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Gesendet: Dienstag, 21. Juli 2009 12:22
An: Zeller, Jan
Cc: squid-users@squid-cache.org
Betreff: Re: AW: AW: AW: AW: [squid-users] Squid 3.1.0.11 beta is available

Zeller, Jan wrote:
> No problem Amos I consulted the man gdb ;) and I also tried "run" in the gdb 
> console but there is still the "No stack" message ...?
> 
> (gdb) run -NXCd9
> .
> .
> .
> 2009/07/21 12:00:43.919| assertion failed: mem.cc:236: "size == 
> StrPoolsAttrs[i].obj_size"
> Program exited with code 01.
> (gdb) bt
> No stack.
> (gdb) quit
> 
> Do you need all the other stuff right from the start ?

There are many ways to run stuff with gdb. The one I gave was simply the 
easiest to instruct. The way you just did was another.

I think the "no stack" is probably the lack of debug symbols in your 
build. You will need to check/fix that before we can continue. I don't 
know how you build Squid so can't help with this bit I'm sorry.

Amos

AW: [squid-users] Squid Installation Issue - 3.1.0.11

2009-07-23 Thread Zeller, Jan

Hi,

please have a look at 
http://www.squid-cache.org/mail-archive/squid-users/200907/0318.html
The problem seems to be really tricky ... at least for me ...

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Daniel [mailto:sq...@zoomemail.com] 
Gesendet: Donnerstag, 23. Juli 2009 17:02
An: Squid-Users@Squid-Cache.org
Betreff: [squid-users] Squid Installation Issue - 3.1.0.11

Good morning,

  I was attempting to install squid for the first time on my test
box and I am encountering an issue that I was hoping someone could help me
with. I know that there was some mention of this issue but I'm not sure that
I saw a resolution.

We're running Novell SuSe Linux Enterprise Server 11 x64 on a VMWare Host &
the Squid version that I'm attempting to install is 3.1.0.11.

cat /etc/SuSE-release
   SUSE Linux Enterprise Server 11 (x86_64)
   VERSION = 11
   PATCHLEVEL = 0

uname -a
   Linux sclthdq01w 2.6.27.23-0.1-default #1 SMP 2009-05-26 17:02:05 -0400
x86_64 x86_64 x86_64 GNU/Linux

I made it through the ./configure fine (I didn't define any custom
arguments).

After the ./configure, I attempted to run the make all. I received the
following at the end:
   cc1plus: warnings being treated as errors
   client_side.cc: In function âint
connKeepReadingIncompleteRequest(ConnStateData*)â:
   client_side.cc:2225: error: comparison between signed and unsigned
integer expressions
   make[3]: *** [client_side.o] Error 1
   make[3]: Leaving directory `/tmp/squid-3.1.0.11/src'
   make[2]: *** [all-recursive] Error 1
   make[2]: Leaving directory `/tmp/squid-3.1.0.11/src'
   make[1]: *** [all] Error 2
   make[1]: Leaving directory `/tmp/squid-3.1.0.11/src'
   make: *** [all-recursive] Error 1

After the make all, I attempted to go ahead and run the make install, even
though I was fairly certain it would bomb. I received the following at the
end:
   cc1plus: warnings being treated as errors
   client_side.cc: In function âint
connKeepReadingIncompleteRequest(ConnStateData*)â:
   client_side.cc:2225: error: comparison between signed and unsigned
integer expressions
   make[3]: *** [client_side.o] Error 1
   make[3]: Leaving directory `/tmp/squid-3.1.0.11/src'
   make[2]: *** [install-recursive] Error 1
   make[2]: Leaving directory `/tmp/squid-3.1.0.11/src'
   make[1]: *** [install] Error 2
   make[1]: Leaving directory `/tmp/squid-3.1.0.11/src'
   make: *** [install-recursive] Error 1

That's that, oh mighty *nix/Squid admins. ;D

Any help would be greatly appreciated!

-Daniel

AW: AW: [squid-users] Squid Installation Issue - 3.1.0.11

2009-07-26 Thread Zeller, Jan

Daniel, so you haven't had this one :

> squid-3.1.0.11/sbin# ./squid -k check -f 
> /etc/squid3/squid.conf-3.1.0.11 2009/07/20 14:38:43| assertion failed: 
> mem.cc:236: "size == StrPoolsAttrs[i].obj_size"
> Aborted

message ? How did you do ?

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Daniel [mailto:sq...@zoomemail.com] 
Gesendet: Freitag, 24. Juli 2009 21:26
An: Squid-Users@Squid-Cache.org
Betreff: RE: AW: [squid-users] Squid Installation Issue - 3.1.0.11

Thanks everyone, it's installed... now to destroy the rest of the config. =D

AW: AW: AW: [squid-users] Squid Installation Issue - 3.1.0.11

2009-07-27 Thread Zeller, Jan

Thank you very much !
Unfortunately squid actually restarts frequently (more frequently than 3.1.0.7)

Jul 27 13:28:04 mybox squid[9279]: assertion failed: http.cc:705: "!eof"
Jul 27 13:28:04 mybox squid[9277]: Squid Parent: child process 9279 exited due t
o signal 6 with status 0
Jul 27 13:28:07 mybox squid[9277]: Squid Parent: child process 9287 started
Jul 27 13:28:07 mybox squid[9287]: Starting Squid Cache version 3.1.0.12 for x86
_64-unknown-linux-gnu...
Jul 27 13:28:07 mybox squid[9287]: Process ID 9287
Jul 27 13:28:07 mybox squid[9287]: With 32768 file descriptors available
Jul 27 13:28:07 mybox squid[9287]: Initializing IP Cache...
.
.
.

I only took the beta version(s) for at least two more or less important URL's :

http://www.football.ch 
http://simonexchange.rochester.edu which is only accessible with 'http_port 80 
connection-auth=on' 

Due to the http://www.squid-cache.org/Advisories/SQUID-2009_2.txt
I should better go back to Squid 3.0.STABLE17 ... despite of some unhappy 
football fans...

kind regards,

Jan




-Ursprüngliche Nachricht-
Von: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Gesendet: Montag, 27. Juli 2009 13:04
An: Henrik Nordstrom
Cc: Zeller, Jan; Daniel; Squid-Users@Squid-Cache.org
Betreff: Re: AW: AW: [squid-users] Squid Installation Issue - 3.1.0.11

Henrik Nordstrom wrote:
> mån 2009-07-27 klockan 08:38 +0200 skrev Zeller, Jan:
>> Daniel, so you haven't had this one :
>>
>>> squid-3.1.0.11/sbin# ./squid -k check -f 
>>> /etc/squid3/squid.conf-3.1.0.11 2009/07/20 14:38:43| assertion failed: 
>>> mem.cc:236: "size == StrPoolsAttrs[i].obj_size"
>>> Aborted
>> message ? How did you do ?
> 
> The cause to this message is known and is being worked on, and to my
> best knowledge it can be considered just a annoying misfeature with not
> actual impact on the use of the Squid-3.1.0.11 beta release.

Fixed from 3.1.0.12, out now.

Amos
-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE17
   Current Beta Squid 3.1.0.12

AW: [squid-users] Squid 3.0.STABLE17 is available

2009-07-30 Thread Zeller, Jan

hi Amos, dear list,

the problem

Jul 30 08:56:28 squid[2888]: ctx: enter level  0: 
'http://www.riehen.ch/de/images/folgelebenskultur.jpg'
Jul 30 08:55:30 squid[2882]: assertion failed: http.cc:705: "!eof"
Jul 30 08:55:30 squid[2847]: Squid Parent: child process 2882 exited due to 
signal 6 with status 0
Jul 30 08:55:33 squid[2847]: Squid Parent: child process 2888 started

also appears also on i686 with Squid Cache version 3.1.0.12 but less 
frequently. I know this info is not precise & helpful. 
I need to enable "debug_options ALL,9" on my production system with real 
traffic. 
Downside is that the logs are growing up very quickly and finally the users get 

ErrPage: ERR_CONNECT_FAIL
Err: (27) File too large

on their screen.

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Gesendet: Donnerstag, 30. Juli 2009 03:37
An: Herbert Faleiros
Cc: squid-users@squid-cache.org
Betreff: Re: [squid-users] Squid 3.0.STABLE17 is available

On Wed, 29 Jul 2009 16:18:16 -0300, Herbert Faleiros
 wrote:
> On Tuesday 28 July 2009 23:22:56 Amos Jeffries wrote:
>> The next formally bundled will be STABLE18. However the daily snapshots
>> serve as intermediate updates on STABLE
>> (http://www.squid-cache.org/Versions/v3/3.0/).
>>
>> I just have not yet had time to apply these fixes to the branch yet.
> 
> 
> 3.0.STABLE17-20090729 still crashing here (x86_64)...
> 
> 2009/07/29 16:07:45| ctx: enter level  0: 
> 'http://images.windowsmedia.com/svcswitch/MG_pt-
> br.xml?locale=416&geoid=20&version=1
> 1.0.6001.7004&userlocale=416'

> 
> 2009/07/29 16:07:45| assertion failed: http.cc:738: "!eof" 
> 
> I also applied (the patch from previous e-mail) against this version:
> 
> patching file src/HttpMsg.cc
> patching file src/HttpReply.cc
> patching file src/HttpRequest.cc
> patching file src/pconn.cc
> 
> The only solution here was downgrade to previous release...
> 
> Any clue?

It seems to be a fread() issue between Squid and x86_64. Disappears on
i386/i686.

Maybe *BSD specific as well, but there are a few reports without OS info
fuzzing my info there.
I plan on spending more time over the weekend adding good tracing info to
find it.

Amos

AW: [squid-users] Squid 3.0.STABLE17 is available

2009-07-30 Thread Zeller, Jan

ok I now have enabled "debug_options ALL,9" on version 3.1.0.12

2009/07/30 09:23:57.897| ctx: enter level  0: 
'http://www.hao-li.com/favicon.ico'
2009/07/30 09:23:57.897| processReplyHeader: key 
'6C931D0F6E779E11100F17D2F019B090'
2009/07/30 09:23:57.897| init-ing hdr: 0x9aa39c0 owner: 3
2009/07/30 09:23:57.897| 0x9aa39c0 lookup for 39
2009/07/30 09:23:57.897| 0x9aa39c0 lookup for 9
2009/07/30 09:23:57.897| 0x9aa39c0 lookup for 22
2009/07/30 09:23:57.897| HttpMsg.cc(157) parse: first line of HTTP message is 
invalid
2009/07/30 09:23:57.897| assertion failed: http.cc:705: "!eof"
2009/07/30 09:24:00.947| enter_suid: PID 3016 taking root priveleges
2009/07/30 09:24:00.947| CacheManager::registerAction: registering legacy config
2009/07/30 09:24:00.947| CacheManager::findAction: looking for action config
2009/07/30 09:24:00.947| Action not found.
2009/07/30 09:24:00.947| CacheManager::registerAction: registered config
2009/07/30 09:24:00.947| Memory pools are 'on'; limit: 5.000 MB
2009/07/30 09:24:00.947| CacheManager::registerAction: registering legacy 
comm_epoll_incoming
2009/07/30 09:24:00.947| CacheManager::findAction: looking for action 
comm_epoll_incoming
2009/07/30 09:24:00.947| Action not found.
2009/07/30 09:24:00.947| CacheManager::registerAction: registered 
comm_epoll_incoming
2009/07/30 09:24:00.947| leave_suid: PID 3016 called
2009/07/30 09:24:00.947| leave_suid: PID 3016 giving up root, becoming 'proxy'
2009/07/30 09:24:00.947| fd_open() FD 5 /squid3-log/cache.log
2009/07/30 09:24:00.947| Starting Squid Cache version 3.1.0.12 for 
i686-pc-linux-gnu...
2009/07/30 09:24:00.947| Process ID 3016

Is that info sufficient ?

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Zeller, Jan [mailto:jan.zel...@id.unibe.ch] 
Gesendet: Donnerstag, 30. Juli 2009 09:05
An: Amos Jeffries; Herbert Faleiros
Cc: squid-users@squid-cache.org
Betreff: AW: [squid-users] Squid 3.0.STABLE17 is available

hi Amos, dear list,

the problem

Jul 30 08:56:28 squid[2888]: ctx: enter level  0: 
'http://www.riehen.ch/de/images/folgelebenskultur.jpg'
Jul 30 08:55:30 squid[2882]: assertion failed: http.cc:705: "!eof"
Jul 30 08:55:30 squid[2847]: Squid Parent: child process 2882 exited due to 
signal 6 with status 0
Jul 30 08:55:33 squid[2847]: Squid Parent: child process 2888 started

also appears also on i686 with Squid Cache version 3.1.0.12 but less 
frequently. I know this info is not precise & helpful. 
I need to enable "debug_options ALL,9" on my production system with real 
traffic. 
Downside is that the logs are growing up very quickly and finally the users get 

ErrPage: ERR_CONNECT_FAIL
Err: (27) File too large

on their screen.

kind regards,

Jan

-Ursprüngliche Nachricht-
Von: Amos Jeffries [mailto:squ...@treenet.co.nz] 
Gesendet: Donnerstag, 30. Juli 2009 03:37
An: Herbert Faleiros
Cc: squid-users@squid-cache.org
Betreff: Re: [squid-users] Squid 3.0.STABLE17 is available

On Wed, 29 Jul 2009 16:18:16 -0300, Herbert Faleiros
 wrote:
> On Tuesday 28 July 2009 23:22:56 Amos Jeffries wrote:
>> The next formally bundled will be STABLE18. However the daily snapshots
>> serve as intermediate updates on STABLE
>> (http://www.squid-cache.org/Versions/v3/3.0/).
>>
>> I just have not yet had time to apply these fixes to the branch yet.
> 
> 
> 3.0.STABLE17-20090729 still crashing here (x86_64)...
> 
> 2009/07/29 16:07:45| ctx: enter level  0: 
> 'http://images.windowsmedia.com/svcswitch/MG_pt-
> br.xml?locale=416&geoid=20&version=1
> 1.0.6001.7004&userlocale=416'

> 
> 2009/07/29 16:07:45| assertion failed: http.cc:738: "!eof" 
> 
> I also applied (the patch from previous e-mail) against this version:
> 
> patching file src/HttpMsg.cc
> patching file src/HttpReply.cc
> patching file src/HttpRequest.cc
> patching file src/pconn.cc
> 
> The only solution here was downgrade to previous release...
> 
> Any clue?

It seems to be a fread() issue between Squid and x86_64. Disappears on
i386/i686.

Maybe *BSD specific as well, but there are a few reports without OS info
fuzzing my info there.
I plan on spending more time over the weekend adding good tracing info to
find it.

Amos

[squid-users] AW: Upgrade Squid on Ubuntu

2009-07-30 Thread Zeller, Jan

Hi,

just have a look at http://packages.ubuntu.com
The lastest stable version they offer seems to be : 2.7.STABLE3-4.1ubuntu1: 
amd64 i386
If you want something newer you have to compile or eventually add a non 
official repository to your sources.list. 
No clue if there is such a repository out there.

kind regards,

Jan



-Ursprüngliche Nachricht-
Von: Kevin C. Connell [mailto:kevin.conn...@millerpaint.com] 
Gesendet: Donnerstag, 30. Juli 2009 03:04
An: squid-users@squid-cache.org
Betreff: [squid-users] Upgrade Squid on Ubuntu

Greetings,

I am relatively new to Squid (and Linux as well for that matter), and I have a 
question.

I am wanting to upgrade a Squid installation running on Ubuntu, and I thought 
this could be done using apt-get update, followed by apt-get u upgrade.

It seems that many things were upgraded successfully... but not Squid.  Perhaps 
an entry is needed in the sources.list file, or ?

This question perhaps should be asked in an Ubuntu users group, but I thought I 
would try here first.


Good day,

-Kevin

AW: [squid-users] Squid 3.0.STABLE17 is available

2009-07-31 Thread Zeller, Jan

> Okay. This gets rid of the assert and adds some debug instead.
> The reason for sending eof=1 when not at true EOF is not yet clear, so
> use carefully, but additional debugs are added when the flag is set.
> debug_options  ... 11,9 for these.
> 
> Amos
> --
> Please be using
>Current Stable Squid 2.7.STABLE6 or 3.0.STABLE17
>Current Beta Squid 3.1.0.12

Hi Amos,

thanks for your patch ! I tried to apply it like this :

squid-3.0.STABLE17/src$ patch --verbose -p1 < /home/
jan/eof_debugs.patch 
Hmm...  Looks like a unified diff to me...
(Stripping trailing CRs from patch.)
The text leading up to this was:
--
|=== modified file 'src/http.cc'
|--- src/http.cc2009-07-26 10:54:29 +
|+++ src/http.cc2009-07-31 06:44:31 +
--
Patching file http.cc using Plan A...
Hunk #1 succeeded at 710.
Hunk #2 succeeded at 1010.
Hunk #3 succeeded at 1053.
Hmm...  Ignoring the trailing garbage.
done

but "$ make" finally fails :(

http.cc: In member function 'void HttpStateData::processReplyHeader()':
http.cc:742: error: request for member 'size' in 
'((HttpStateData*)this)->HttpStateData::readBuf', which is of non-class type 
'MemBuf*'
http.cc: In member function 'void HttpStateData::readReply(size_t, comm_err_t, 
int)':
http.cc:1013: error: expected primary-expression before '>' token
make[3]: *** [http.o] Error 1
make[3]: Leaving directory `/usr/local/src/squid-3.0.STABLE17/src'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/usr/local/src/squid-3.0.STABLE17/src'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/usr/local/src/squid-3.0.STABLE17/src'
make: *** [all-recursive] Error 1

kind regards,

Jan

RE: [squid-users] Squid 3.1.0.12: assertion failed in http.cc, line 705: !eof

2009-08-03 Thread Zeller, Jan

Hi,

i took the daily snapshot 3.1.0.12-20090803 and it works pretty well ! 
The assertion problem has vanished. Very nice work !

regards,

Jan


From: Silamael [silam...@coronamundi.de]
Sent: Monday, August 03, 2009 6:02 PM
To: squid-users@squid-cache.org
Subject: [squid-users] Squid 3.1.0.12: assertion failed in http.cc, line 705: 
!eof

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello together,

Squid 3.1.0.12 runs pretty well except this assertion problem i've also
seen on the mailing list for Squid 3.0 Stable17.
Every time the assertion fails, before following is logged:
> ... HttpMsg.cc(157) parse: first line of HTTP message is invalid

Is there any patch i can apply to Squid version 3.1.0.12 to fix this
problem?

Thanks in advance!

AW: Aw: [squid-users] Running two squid3 process, Why?

2009-08-04 Thread Zeller, Jan

Hi all,

would like to know if from user perspective the signal 6 will have a 
significant http service interruption.
I've tested this with wget and sent a kill -6 to the child process and to my 
surprise wget was still downloading without any service interruption.

How would loadbalancers handle this behaviour ? Do they notice this signal 6 ?

By the way is signal 6 really 

$ kill -l
6) SIGABRT ?

e.g.

Aug  4 10:19:25 mybox squid[13220]: http.cc(542) cacheableReply: HttpStateData:
:cacheableReply: unexpected http status code 604
Aug  4 10:19:25 mybox squid[13220]: ctx: exit level  0
Aug  4 10:27:27 mybox squid[13220]: assertion failed: store_client.cc:430: "STO
RE_DISK_CLIENT == getType()"
Aug  4 10:27:27 mybox squid[11814]: Squid Parent: child process 13220 exited du
e to signal 6 with status 0
Aug  4 10:27:30 mybox squid[11814]: Squid Parent: child process 14441 started
Aug  4 10:27:30 mybox squid[14441]: Starting Squid Cache version 3.1.0.12-20090
803 for x86_64-unknown-linux-gnu...
Aug  4 10:27:30 mybox squid[14441]: Process ID 14441

Is this observation right ?

kind regards,

Jan


> -Ursprüngliche Nachricht-
> Von: Amos Jeffries [mailto:squ...@treenet.co.nz]
> Gesendet: Sonntag, 2. August 2009 02:46
> An: Jeff Pang
> Cc: sachinmal...@gmail.com; squid-users@squid-cache.org
> Betreff: Re: Aw: [squid-users] Running two squid3 process, Why?
> 
> Jeff Pang wrote:
> >
> >
> >
> > - Original Nachricht 
> > Von: Sachin Malave 
> > An:  squid-users@squid-cache.org
> > Datum:   01.08.2009 14:37
> > Betreff: [squid-users] Running two squid3 process, Why?
> >
> >> I am using squid3, After starting squid It creates two process
> >>
> >> $sudo squid3
> >> $ps -A
> >>
> >> It displays something like..
> >> .
> >> .
> >>  6325 ?00:00:00 squid3
> >>  6327 ?00:00:25 squid3
> >>  6328 ?00:00:00 unlinkd
> >>  6367 ?   .
> >>.
> >>.
> >>
> >> Can anybody tell me why it has created two processes?
> >>
> >
> >
> > Well, from my looking at the sources years ago, one process is the
> parent, who does nothing but monitor the child, another process is the
> child, who does the actual http request handling. When child dies due
> to some exception, parent will re-launch another new child.
> >
> > Jeff.
> 
> Correct. And the third one handles the disk deletions.
> 
> Amos
> --
> Please be using
>Current Stable Squid 2.7.STABLE6 or 3.0.STABLE17
>Current Beta Squid 3.1.0.12

AW: AW: Aw: [squid-users] Running two squid3 process, Why?

2009-08-04 Thread Zeller, Jan

> Why signal 6?

signal 6 like mentioned in 

Aug  4 10:27:27 mybox squid[11814]: Squid Parent: child process 13220 exited 
due to signal 6 with status 0 
Aug  4 10:27:30 mybox squid[11814]: Squid Parent: child process 14441 started 
Aug  4 10:27:30 mybox squid[14441]: Starting Squid Cache version 3.1.0.12-20090

kills the whole http service ? 
Oh really ? I thought it was a kind of graceful restart described on 
http://httpd.apache.org/docs/2.2/stopping.html

> I don't see how wget would have surived that if it was using the
> proxy..
So I probably send an SIGUSR1 during my tests...

Anyway the service interruption should be very short while sending signal 6 
...? according to the log snippet approximately 3 seconds...

What's about the keep-alive thing in http ? 
http://en.wikipedia.org/wiki/HTTP_persistent_connection
Sorry I am really confused about how loadbalancers e.g. linuxvirtualserver.org 
are dealing with such a short service interruption.

I used linuxvirtualserver.org with a connect_timeout of 5 secs. So the clients 
should stay connected to the same squidbox if service interruption < 5secs ?
Sorry it's all a bit confusing.

thanks for your advise

Jan
> 
> 
> > How would loadbalancers handle this behaviour ? Do they notice this
> signal 6 ?
> 
> Signal 6 forces an unexpected restart, temporarily stopping the whole
> service.. very intrusive.
> 
> > By the way is signal 6 really
> >
> > $ kill -l
> > 6) SIGABRT ?
> 
> Yes.
> 
> It's much better if you use the "squid -k ..." functions to communicate
> with Squid than using kill manually..
> 
> Regards
> Henrik

RE: AW: AW: Aw: [squid-users] Running two squid3 process, Why?

2009-08-04 Thread Zeller, Jan

Ok thank you all for this in depth explanation. Now I feel much better !

kind regards,

Jan

From: Henrik Nordstrom [hen...@henriknordstrom.net]
Sent: Tuesday, August 04, 2009 5:07 PM
To: Zeller, Jan
Cc: squid-users@squid-cache.org
Subject: Re: AW: AW: Aw: [squid-users] Running two squid3 process, Why?

tis 2009-08-04 klockan 14:41 +0200 skrev Zeller, Jan:

> signal 6 like mentioned in
>
> Aug  4 10:27:27 mybox squid[11814]: Squid Parent: child process 13220 exited 
> due to signal 6 with status 0
> Aug  4 10:27:30 mybox squid[11814]: Squid Parent: child process 14441 started
> Aug  4 10:27:30 mybox squid[14441]: Starting Squid Cache version 
> 3.1.0.12-20090
>
> kills the whole http service ?

Yes.

> So I probably send an SIGUSR1 during my tests...

Probably. That's graceful.

> Anyway the service interruption should be very short while sending signal 6 
> ...? according to the log snippet approximately 3 seconds...

Depends on your configuration and definition of fast. But yes, for most
it's quite fast.

> What's about the keep-alive thing in http ? 
> http://en.wikipedia.org/wiki/HTTP_persistent_connection
> Sorry I am really confused about how loadbalancers e.g. 
> linuxvirtualserver.org are dealing with such a short service interruption.

lvs as such doesn't care as it just shuffles packets, but for example
ldirectord or heartbeat MAY notice if the restart of Squid happened just
as it is probing the service.

Regards
Henrik

AW: [squid-users] Squid crashes - Create Bugreport?

2009-08-11 Thread Zeller, Jan

Hi,

i am actually using 3.0.STABLE18 in a production environment and it does very 
well.
No such 'assertion failed' problems. You should upgrade...

regards,

Jan


> -Ursprüngliche Nachricht-
> Von: Thomas Jackowski [mailto:a...@hadiko.de]
> Gesendet: Dienstag, 11. August 2009 08:56
> An: squid-users@squid-cache.org
> Betreff: [squid-users] Squid crashes - Create Bugreport?
> 
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Hi,
> 
> Squid crashes with this message in cache.log:
> 
> 2009/08/11 06:54:31| assertion failed: store_client.cc:430:
> "STORE_DISK_CLIENT == getType()"
> 2009/08/11 06:54:35| Starting Squid Cache version 3.0.STABLE8 for
> x86_64-pc-linux-gnu...
> 
> OS: Debian Lenny
> Squid Version: 3.0STABLE8-3+lenny2
> 
> Is there a chance that this bug is fixed in newer Verions of Squid3(not
> the Debian Package) or is the problem elsewhere?
> 
> Please tell me what informations I should provide to you :)
> - --
> Gruß,
> Thomas
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iEYEARECAAYFAkqBFfgACgkQHEARyOCtsufOLwCgghixm1+/n7h4NSpKn2kSLPSQ
> OugAmwUeweoYTq4NwvV/UEAccVqu29qI
> =4118
> -END PGP SIGNATURE-

[squid-users] announce_period ?

2009-08-19 Thread Zeller, Jan

Dear list,

i am actually using STABLE18 and was stumbling across this :

http://www.squid-cache.org/Versions/v3/3.0/cfgman/announce_period.html
Default Value:  announce_period 0

This is how frequently to send cache announcements. The
default is `0' which disables sending the announcement
messages.

now i checked this setting with :
$ ./squidclient -h  -p  mgr:config|grep announce
announce_period 31536000 seconds
announce_host tracker.ircache.net
announce_port 3131

but I never have configured this parameter so I assumed that it would take the 
default value. 
I would like to have it off. I also explicitly set "announce_period 0" but in 
vain.
Any hint ?

kind regards,

Jan

AW: [squid-users] Recommendations for ICAP malware av scanning?

2009-08-26 Thread Zeller, Jan

Hi, 

i am using clamav. Works pretty well with squid-3.0STABLE18 and c_icap-060708rc3
No experience with kaspersky. The default configuration is more or less 
straight forward. Everything is well documented.
Installed c-icap on the same box where squid does it's job, but you don't have 
to. 

See :

http://c-icap.sourceforge.net/
http://www.squid-cache.org/Versions/v3/3.0/cfgman/ (ICAP section)



regards,

Jan


> -Ursprüngliche Nachricht-
> Von: Chris Richardson [mailto:cric...@gmail.com]
> Gesendet: Donnerstag, 27. August 2009 02:09
> An: squid-users@squid-cache.org
> Betreff: [squid-users] Recommendations for ICAP malware av scanning?
> 
> Hi guys I was hoping someone might have some input or recomendations
> for me
> 
> here is what i am trying to do I think i would like to setup squid and
> use an ICAP server to do av and malware scanning doesnt matter the
> software opensource or comerical was wondering if any one had any
> ideas so far i am thinking clam and or kaspersky
> 
> thanks
> -Chris

[squid-users] srcdomain none

2010-01-20 Thread Zeller, Jan

Dear Squid-list,

i am a bit confused about :
http://www.squid-cache.org/Versions/v3/3.0/cfgman/acl.html

acl aclname srcdomain   .foo.com ... # reverse lookup, from client IP
The name "none" is used if the reverse lookup fails.


What I want to achieve is to deny access to clients which have no DNS entry. 
My ACL actually looks like this :

acl BadClients srcdomain none
deny_info ERR_CUSTOM_ACCESS_DENIED BadClients
http_access deny BadClients

But it doesn't work properly. The message which is defined in 
ERR_CUSTOM_ACCESS_DENIED appears but once the refresh button (or CTRL-R) in the 
browser (IE & Firefox) is pressed access is granted. 
What am I doing wrong here ? /

regards,

Jan

RE: [squid-users] srcdomain none

2010-01-21 Thread Zeller, Jan

ok thank you Amos. 
I think that I figured it out. 

at the beginning I had this one :

168 acl MyNet src x.x.x.x/y.y.y.y
173 acl BadClients srcdomain none
257 http_access deny BadClients
259 http_access allow MyNet
260 http_access deny all
284 deny_info ERR_CUSTOM_ACCESS_DENIED BadClients

Now I changed the MyNet ACL to :

168 acl BadClients srcdomain none
170 acl MyNet srcdomain .mydomain.xyz
259 http_access deny BadClients
261 http_access allow MyNet
262 http_access deny all
284 deny_info ERR_CUSTOM_ACCESS_DENIED BadClients

and it seems to work fine.

regards,

Jan

From: Amos Jeffries [squ...@treenet.co.nz]
Sent: Thursday, January 21, 2010 1:08 AM
To: squid-users@squid-cache.org
Subject: Re: [squid-users] srcdomain none

On Wed, 20 Jan 2010 14:25:43 +0100, "Zeller, Jan" 
wrote:
> Dear Squid-list,
>
> i am a bit confused about :
> http://www.squid-cache.org/Versions/v3/3.0/cfgman/acl.html
>
> acl aclname srcdomain   .foo.com ... # reverse lookup, from client
IP
> The name "none" is used if the reverse lookup fails.
>
>
> What I want to achieve is to deny access to clients which have no DNS
> entry.
> My ACL actually looks like this :
>
> acl BadClients srcdomain none
> deny_info ERR_CUSTOM_ACCESS_DENIED BadClients
> http_access deny BadClients
>
> But it doesn't work properly. The message which is defined in
> ERR_CUSTOM_ACCESS_DENIED appears but once the refresh button (or CTRL-R)
in
> the browser (IE & Firefox) is pressed access is granted.
> What am I doing wrong here ? /

Set debug_options 28,3 and find out.

Amos

AW: [squid-users] Squid opens too much icap connections

2010-03-02 Thread Zeller, Jan

Hi,

have you ever tried this one ?
http://www.cyberciti.biz/faq/linux-increase-the-maximum-number-of-open-files/

regards,

Jan


Von: akinf [fatih.a...@turkcellteknoloji.com.tr]
Gesendet: Dienstag, 2. März 2010 09:45
An: squid-users@squid-cache.org
Betreff: [squid-users] Squid opens too much icap connections

 have implemnted a icap server, and configured squid to forward request to
this server.
Everything works fine but, Squid opens too much icap connections and exhaust
my filedescriptors.
I upgraded my squid to latest version Squid Cache: Version 3.1.0.17
Bu it still opens too much icap connections, Sometimes i see in log files ,
such a warning

2010/02/28 00:32:31| client_side.cc(2959) okToAccept: WARNING! Your cache is
running out of filedescriptors

I configured squid to use persistent_connections on but it did not help.

Can you please help.
--
View this message in context: 
http://n4.nabble.com/Squid-opens-too-much-icap-connections-tp1574738p1574738.html
Sent from the Squid - Users mailing list archive at Nabble.com.

AW: [squid-users] Squid3 issues

2010-03-18 Thread Zeller, Jan

I also say thanks to the squid-team for their excellent work & support !
We're running 4 squid-3.0 servers for our whole campus including c-icap from 
Tsantilas Christos, 
At the begining we had some implementation problems of course but that is 
normal. (Mostly due to Layer 8 issues.)
But to summarize : we're really really satisfied with this nice piece of 
software even if I still don't know how it really works.
What would you use instead of squid ? Bluecoat Inc. ? or maybe mod_proxy / 
mod_cache ?

Mit freundlichen Grüssen

Jan
Universität Bern

AW: [squid-users] The requested URL could not be retrieved TCP_MISS/502

2010-03-23 Thread Zeller, Jan

hmm seems not to work properly :

behind proxy :
$ httping -g http://www.bitlifesciences.com/wcvi2010 -c 3 mysquidproxy:80
PING www.bitlifesciences.com:80 (http://www.bitlifesciences.com/wcvi2010):
timeout connecting to host
timeout connecting to host
timeout connecting to host
--- http://www.bitlifesciences.com/wcvi2010 ping statistics ---
3 connects, 0 ok, 100.00% failed

without proxy
./squidclient -v -h localhost -p 80 http://www.bitlifesciences.com/wcvi2010
headers: 'GET http://www.bitlifesciences.com/wcvi2010 HTTP/1.0
Accept: */*

'
HTTP/1.0 502 Bad Gateway
Server: squid
Mime-Version: 1.0
Date: Tue, 23 Mar 2010 14:20:17 GMT
Content-Type: text/html
Content-Length: 1493
X-Squid-Error: ERR_READ_ERROR 104
X-Cache: MISS from mysquidproxy
Via: 1.0 mysquidproxy (squid)
Proxy-Connection: close

.
.
.

The following error was encountered:



Read Error



.
.
,

./squid -v
Squid Cache: Version 3.0.STABLE23
configure options:  '--prefix=/opt/squid-3.0.STABLE23' '--enable-icap-client' 
'--enable-ssl' '--enable-default-err-language=English' 
'--enable-err-languages=English' '--enable-linux-netfilter' '--with-pthreads' 
'--with-filedescriptors=32768'


regards,

Jan




Von: Ralf Hildebrandt [ralf.hildebra...@charite.de]
Gesendet: Dienstag, 23. März 2010 14:45
An: squid-users@squid-cache.org
Betreff: Re: [squid-users] The requested URL could not be retrieved TCP_MISS/502

* Umesh Bodalina :
> Hi Squid
> I'm getting the following error when I try to access the following
> site through Squid:

Works for me with:
Squid 2.7.STABLE8-1 from Debian

AW: [squid-users] SquidCompilationproblem -squid_ldap_auth.c:123:18: error: lber.h: No such file or directory

2010-03-26 Thread Zeller, Jan

Hi,

you need something like "libldap2-dev"
Please have a look at http://packages.ubuntu.com (if you have ubuntu) or use 
"yum search openldap-devel" or something like this if you have RedHat

regards,

Jan



Von: GIGO . [gi...@msn.com]
Gesendet: Freitag, 26. März 2010 14:06
An: SquidSuperUser; SquidHelp
Betreff: RE: [squid-users] SquidCompilationproblem -squid_ldap_auth.c:123:18: 
error: lber.h: No such file or directory

Dear Amos,

It did worked on Ubuntu but now i am facing the same problem in RHEL. Can you 
please guide which package i would require.

regards,

Bilal



> Date: Sun, 21 Mar 2010 22:06:09 +
> From: squ...@treenet.co.nz
> To: squid-users@squid-cache.org
> Subject: Re: [squid-users] SquidCompilationproblem -squid_ldap_auth.c:123:18: 
> error: lber.h: No such file or directory
>
> On Sun, 21 Mar 2010 19:37:56 +, "GIGO ." wrote:
>> Please guide me on this whats wrong. I am unable to compile
>>
>> Squid3stable24 on Ubuntu 8.04 LTS server.
>>
>> I want to use active directory authentication(my clients should be able
> to
>> authenticate themselves with active directory accounts) Following is my
>> command:
>>
>
> You need the LDAP packages to be installed.
>
> Make sure you have the package build dependencies listed here:
> https://launchpad.net/ubuntu/lucid/+source/squid3
>
>
> Amos
_
Hotmail: Trusted email with Microsoft’s powerful SPAM protection.
https://signup.live.com/signup.aspx?id=60969

AW: [squid-users] How to squid 2.6 transparent

2010-04-14 Thread Zeller, Jan

>don't find a clear guide to configure squid transparent for the squid version 
>2.6.STABLE16 .

Hi,

there are multiple ways to intercept/redirect traffic. Did you consult 
http://wiki.squid-cache.org/ConfigExamples/#Interception ?

regards,

Jan

[squid-users] idnsSendQuery - Network is unreachable

2010-04-15 Thread Zeller, Jan

Dear list,

i had a very minimalistic reverse ssl config running with
squid-3.0.STABLE25 hosted on an OpenBSD-4.6 (i386) box which essentially look 
like this :

cache_peer 192.168.1.3 parent 4443 0 no-query originserver name=myAccel 
login=PASS ssl sslflags=DONT_VERIFY_PEER
https_port 4443 accel cert=/etc/pki/cert.pem key=/etc/pki/cert.key 
defaultsite=MyFQDN:4443

The same config does not work with 3.1.1 anymore.
I had to --disable-ipv6 like mentioned on 
http://www.mail-archive.com/squid-users@squid-cache.org/msg57495.html
I actually have no IPv6 but I wonder why this does not work with 3.1.1

regards,

Jan

[squid-users] squid-3,1.4 - dead sibling

2010-06-01 Thread Zeller, Jan (ID)

Dear list,

I upgraded to 3.1.4 but since then all my siblings seems to be down :(

$ ./squidclient -h myserver -p myport mgr:server_list
.
.
Status : Down
.
.

This is strange because i got plenty of icpv2 (3130) traffic over the wire 
(tcpdump).
It (still) works well with 3.1.3. Didn't change anything...

Any idea

regards,

Jan

RE: [squid-users] help while using squid

2010-06-15 Thread Zeller, Jan (ID)

Hi,

use something like 'tcpdump' to see if the packets really arrive on your squid 
port.

regards,

---

Jan

-Original Message-
From: ning luwen [mailto:ninglu...@gmail.com] 
Sent: Mittwoch, 16. Juni 2010 07:56
To: squid-users@squid-cache.org
Subject: [squid-users] help while using squid

Hi,

the problem goes:

squid server ip like 211.83.105.*
the client ip like 121.49.127.*
the two machine can ping each other

the squid.conf i change to :

http_port 3128
acl all src 0.0.0.0/0
http_access allow all


and this simply do not work,
what should i do?

ps:
the system i use is ubuntu 10.04, and squid version is 3.0

regards,
luwening

RE: [squid-users] DNS server setup for squid/kerberos

2010-06-23 Thread Zeller, Jan (ID)

> 3. Are there any material gains installing BIND DNS on squid server?

Hi,

have a look at 

http://www.zytrax.com/books/dns/ch6/#caching
http://linuxdevcenter.com/pub/a/linux/2001/07/26/squid.html?page=1

regards,

---

Jan

[squid-users] from ufs to aufs

2010-06-29 Thread Zeller, Jan (ID)

dear squid,

do I have to remove and rebuild my cache dir (squid -z) if I move from ufs to 
aufs ?

kind regards,

---

Jan

[squid-users] unable to compile squid-3.1.5 on debian lenny

2010-07-02 Thread Zeller, Jan (ID)

Dear list,

unfortunately I am unable to compile squid-3.1.5 on Debian lenny 5.0.5

$ uname -srvmpio
Linux 2.6.26-2-amd64 #1 SMP Sun Jun 20 20:16:30 UTC 2010 x86_64 unknown unknown 
GNU/Linux

$ ./configure --prefix=/opt/squid-3.1.5 --enable-icap-client --enable-ssl 
--disable-translation --disable-auto-locale --enable-linux-netfilter 
--with-pthreads --with-filedescriptors=32768 --enable-storeio=ufs,aufs 
--enable-removal-policies=lru,heap

.
.

$ make

.
.

depbase=`echo LoadableModule.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
g++ -DHAVE_CONFIG_H 
-DDEFAULT_CONFIG_FILE=\"/opt/squid-3.1.5/etc/squid.conf\" 
-DDEFAULT_SQUID_DATA_DIR=\"/opt/squid-3.1.5/share\" 
-DDEFAULT_SQUID_CONFIG_DIR=\"/opt/squid-3.1.5/etc\"  -I.. -I../include -I../src 
-I../include  -I../src   -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
-Werror  -D_REENTRANT -g -O2 -MT LoadableModule.o -MD -MP -MF $depbase.Tpo -c 
-o LoadableModule.o LoadableModule.cc &&\
mv -f $depbase.Tpo $depbase.Po  
In file included from LoadableModule.cc:10:
../libltdl/ltdl.h:36:31: error: libltdl/lt_system.h: No such file or directory
../libltdl/ltdl.h:37:30: error: libltdl/lt_error.h: No such file or directory
../libltdl/ltdl.h:38:33: error: libltdl/lt_dlloader.h: No such file or directory
depbase=`echo LoadableModules.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
g++ -DHAVE_CONFIG_H 
-DDEFAULT_CONFIG_FILE=\"/opt/squid-3.1.5/etc/squid.conf\" 
-DDEFAULT_SQUID_DATA_DIR=\"/opt/squid-3.1.5/share\" 
-DDEFAULT_SQUID_CONFIG_DIR=\"/opt/squid-3.1.5/etc\"  -I.. -I../include -I../src 
-I../include  -I../src   -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
-Werror  -D_REENTRANT -g -O2 -MT LoadableModules.o -MD -MP -MF $depbase.Tpo -c 
-o LoadableModules.o LoadableModules.cc &&\  
mv -f $depbase.Tpo $depbase.Po  
In file included from LoadableModule.cc:10:
../libltdl/ltdl.h:50: error: expected constructor, destructor, or type 
conversion before 'typedef'
../libltdl/ltdl.h:53: error: expected constructor, destructor, or type 
conversion before 'int'
.
.


ii  libltdl31.5.26-4+lenny1A system 
independent dlopen wrapper for GNU libtool
ii  libltdl3-dev1.5.26-4+lenny1A system 
independent dlopen wrapper for GNU libtool

are installed on my box but the necessary lt_system.h, lt_error.h, 
lt_dlloader.h seems not to be in those packages.

see http://packages.debian.org

What am I doing wrong ? I never had this problem before. Any hint ?

kind regards,

---

Jan

RE: [squid-users] unable to compile squid-3.1.5 on debian lenny

2010-07-02 Thread Zeller, Jan (ID)

> Try setting CPPFLAGS before running configure. Doing this lets you use
> the libtool version included with the source.
> I think the build scripts were supposed to take care of this but they
> don't.
> 
> $ declare -x CPPFLAGS="-I../libltdl"
> $ ./configure (your configure options)
> $ make
> 
> --
> Sean

Thanks Sean. That worked. Quit interesting that I have to use "declare -x" ... 

---

Jan

RE: [squid-users] unable to compile squid-3.1.5 on debian lenny

2010-07-02 Thread Zeller, Jan (ID)

> Sorry about this. It's not you.
> 
> Our packaging machine has undergone an OS upgrade since the last
> releases. Squid now auto-bundles libltdl 2.2.6b which unfortunately
> depends on some system headers without detecting their absence cleanly
> on systems bundling older LTDL.
> 
> LTDL is only needed by eCAP presently, so most will be able to safely
> build with an explicit --disable-loadable-modules.
> 
> If you do require eCAP try that CPPFLAGS hack mentioned in the other
> post by Sean to get LTDL building.
> 
> Alternatively people in other projects who have hit this seem to favor
> patching their libltdl/ltdl.h to use "" quotes in the #include lines
> instead of <> quotes.
> 
> Amos
> --
> Please be using
>Current Stable Squid 2.7.STABLE9 or 3.1.4

Great ! Thank you Amos for this in-depth explanation !

---

Jan

RE: [squid-users] unable to compile squid-3.1.5 on debian lenny

2010-07-06 Thread Zeller, Jan (ID)

> FWIW: I've patched the release now. The current daily snapshots should
> build without this bug.
> 
> Amos
> --
> Please be using
>Current Stable Squid 2.7.STABLE9 or 3.1.5

Thank you Amos for the daily snapshot.
It worked well with CPPFLAGS=-I../libltdl

---

Jan

RE: [squid-users] ICP is disabled?

2010-07-19 Thread Zeller, Jan (ID)

Hi,

i have the same problem but was unable to fix it. 
http://marc.info/?l=squid-users&m=127537675726600&w=2

---

Jan

> -Original Message-
> From: John Horne [mailto:john.ho...@plymouth.ac.uk]
> Sent: Montag, 19. Juli 2010 16:08
> To: Squid users
> Subject: [squid-users] ICP is disabled?
> 
> Hello,
> 
> I have just upgraded one of our Squid 2.7 stable 9 servers to 3.1.4. I
> modified the squid.conf file slightly to cater for changes that
> occurred
> in the upgrade. However, in my cache.log file I am getting the message:
> 
>   2010/07/19 15:02:09| ICP is disabled! Cannot send ICP request to
> peer.
> 
> This seems to occur every few minutes. I have not modified any ICP
> config lines, so I am a bit lost as to why this is happening. Our
> config
> shows:
> 
> ==
> cache_peer wwwcache1.plymouth.ac.uk sibling 3128 3130 proxy-only
>no-delay no-netdb-exchange
> #cache_peer wwwcache2.plymouth.ac.uk sibling 3128 3130 proxy-only
>no-delay no-netdb-exchange
> cache_peer wwwcache3.plymouth.ac.uk sibling 3128 3130 proxy-only
>no-delay no-netdb-exchange
> 
> acl plym_src_IP src 141.163.0.0/16 10.0.0.0/8 192.168.0.0/16
>172.16.0.0/12
> 
> icp_access allow plym_src_IP
> icp_access deny all
> ==
> 
> This worked fine at 2.7, but I cannot see why 3.1 doesn't like it and
> says that ICP is disabled. Any ideas?
> 
> 
> 
> Thanks,
> 
> John.
> 
> --
> John Horne   Tel: +44 (0)1752 587287
> University of Plymouth, UK   Fax: +44 (0)1752 587001

[squid-users] squid-3.1.5 core files

2010-07-22 Thread Zeller, Jan (ID)

Dear squid-list,

i tried to follow the guidelines on 
http://wiki.squid-cache.org/SquidFaq/BugReporting because i am getting lots of 
core files.

- squid version : 3.1.5
- OS : Debian GNU/Linux 5.0.5 (lenny) amd64

# ls -lth core 
-rw--- 1 proxy proxy 2.1G 2010-07-22 16:59 core

# file core
core: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from 
'(squid) -sY -f /etc/squid3/squid-3.1.5.conf'

# gdb /opt/squid-3.1.5/sbin/squid core
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...

warning: Can't read pathname for load map: Input/output error.
Reading symbols from /lib/librt.so.1...done.
Loaded symbols for /lib/librt.so.1
Reading symbols from /lib/libpthread.so.0...done.
Loaded symbols for /lib/libpthread.so.0
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /usr/lib/libssl.so.0.9.8...done.
Loaded symbols for /usr/lib/libssl.so.0.9.8
Reading symbols from /usr/lib/libcrypto.so.0.9.8...done.
Loaded symbols for /usr/lib/libcrypto.so.0.9.8
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /usr/lib/libstdc++.so.6...done.
Loaded symbols for /usr/lib/libstdc++.so.6
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux-x86-64.so.2...done.
Loaded symbols for /lib64/ld-linux-x86-64.so.2
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/libnss_compat.so.2...done.
Loaded symbols for /lib/libnss_compat.so.2
Reading symbols from /lib/libnss_nis.so.2...done.
Loaded symbols for /lib/libnss_nis.so.2
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Core was generated by `(squid) -sY -f /etc/squid3/squid-3.1.5.conf'.
Program terminated with signal 6, Aborted.
[New process 1433]
#0  0x7f61234e6ed5 in raise () from /lib/libc.so.6
(gdb) bt
#0  0x7f61234e6ed5 in raise () from /lib/libc.so.6
#1  0x7f61234e83f3 in abort () from /lib/libc.so.6
#2  0x7f6123d6a294 in __gnu_cxx::__verbose_terminate_handler ()
   from /usr/lib/libstdc++.so.6
#3  0x7f6123d68696 in ?? () from /usr/lib/libstdc++.so.6
#4  0x7f6123d686c3 in std::terminate () from /usr/lib/libstdc++.so.6
#5  0x7f6123d68f6f in __cxa_pure_virtual () from /usr/lib/libstdc++.so.6
#6  0x0055a1e0 in JobDialer (this=0x7fffcc60, aJob=0x599) at 
AsyncJob.cc:172
#7  0x005b142d in Adaptation::Initiator::announceInitiatorAbort 
(this=0xc8e9450, 
x...@0xc8e9480) at ../../src/base/AsyncJobCalls.h:33
#8  0x005b1ad1 in Adaptation::Iterator::noteInitiatorAborted 
(this=0xc8e9438)
at Iterator.cc:104
#9  0x0055a7db in JobDialer::dial (this=0x6d7cbb20, ca...@0x6d7cbaf0)
at AsyncJob.cc:215
#10 0x00559bdb in AsyncCall::make (this=0x6d7cbaf0) at AsyncCall.cc:34
#11 0x0055c270 in AsyncCallQueue::fireNext (this=0xad3000) at 
AsyncCallQueue.cc:53
#12 0x0055c418 in AsyncCallQueue::fire (this=0xad3000) at 
AsyncCallQueue.cc:39
#13 0x004ca81c in EventLoop::runOnce (this=0x7fffce20) at 
EventLoop.cc:130
#14 0x004ca8f8 in EventLoop::run (this=0x7fffce20) at 
EventLoop.cc:94
#15 0x00513eac in SquidMain (argc=4, argv=0x7fffcfc8) at 
main.cc:1397
#16 0x00514436 in main (argc=1433, argv=0x599) at main.cc:1159
(gdb) quit


What could be the cause and what kind of additional information should I 
provide for better analysis ?


thanks,

---

Jan

[squid-users] RE: squid-3.1.5 core files

2010-07-28 Thread Zeller, Jan (ID)

hmm well dear squid I decided to take the Debian-backport package release from 
http://www.sput.nl/software/squid31-lenny.html instead of compiling myself. 
Maybe this could be the best way to get rid of the core dumps ...
let's see...

---

Jan

> -Original Message-
> From: Zeller, Jan (ID) [mailto:jan.zel...@id.unibe.ch]
> Sent: Donnerstag, 22. Juli 2010 17:28
> To: Squid users
> Subject: [squid-users] squid-3.1.5 core files
> 
> Dear squid-list,
> 
> i tried to follow the guidelines on http://wiki.squid-
> cache.org/SquidFaq/BugReporting because i am getting lots of core
> files.
> 
> - squid version : 3.1.5
> - OS : Debian GNU/Linux 5.0.5 (lenny) amd64
> 
> # ls -lth core
> -rw--- 1 proxy proxy 2.1G 2010-07-22 16:59 core
> 
> # file core
> core: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style,
> from '(squid) -sY -f /etc/squid3/squid-3.1.5.conf'
> 
> # gdb /opt/squid-3.1.5/sbin/squid core
> GNU gdb 6.8-debian
> Copyright (C) 2008 Free Software Foundation, Inc.
> License GPLv3+: GNU GPL version 3 or later
> <http://gnu.org/licenses/gpl.html>
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.  Type "show
> copying"
> and "show warranty" for details.
> This GDB was configured as "x86_64-linux-gnu"...
> 
> warning: Can't read pathname for load map: Input/output error.
> Reading symbols from /lib/librt.so.1...done.
> Loaded symbols for /lib/librt.so.1
> Reading symbols from /lib/libpthread.so.0...done.
> Loaded symbols for /lib/libpthread.so.0
> Reading symbols from /lib/libcrypt.so.1...done.
> Loaded symbols for /lib/libcrypt.so.1
> Reading symbols from /usr/lib/libssl.so.0.9.8...done.
> Loaded symbols for /usr/lib/libssl.so.0.9.8
> Reading symbols from /usr/lib/libcrypto.so.0.9.8...done.
> Loaded symbols for /usr/lib/libcrypto.so.0.9.8
> Reading symbols from /lib/libnsl.so.1...done.
> Loaded symbols for /lib/libnsl.so.1
> Reading symbols from /lib/libdl.so.2...done.
> Loaded symbols for /lib/libdl.so.2
> Reading symbols from /usr/lib/libstdc++.so.6...done.
> Loaded symbols for /usr/lib/libstdc++.so.6
> Reading symbols from /lib/libm.so.6...done.
> Loaded symbols for /lib/libm.so.6
> Reading symbols from /lib/libgcc_s.so.1...done.
> Loaded symbols for /lib/libgcc_s.so.1
> Reading symbols from /lib/libc.so.6...done.
> Loaded symbols for /lib/libc.so.6
> Reading symbols from /lib/ld-linux-x86-64.so.2...done.
> Loaded symbols for /lib64/ld-linux-x86-64.so.2
> Reading symbols from /usr/lib/libz.so.1...done.
> Loaded symbols for /usr/lib/libz.so.1
> Reading symbols from /lib/libnss_compat.so.2...done.
> Loaded symbols for /lib/libnss_compat.so.2
> Reading symbols from /lib/libnss_nis.so.2...done.
> Loaded symbols for /lib/libnss_nis.so.2
> Reading symbols from /lib/libnss_files.so.2...done.
> Loaded symbols for /lib/libnss_files.so.2
> Core was generated by `(squid) -sY -f /etc/squid3/squid-3.1.5.conf'.
> Program terminated with signal 6, Aborted.
> [New process 1433]
> #0  0x7f61234e6ed5 in raise () from /lib/libc.so.6
> (gdb) bt
> #0  0x7f61234e6ed5 in raise () from /lib/libc.so.6
> #1  0x7f61234e83f3 in abort () from /lib/libc.so.6
> #2  0x7f6123d6a294 in __gnu_cxx::__verbose_terminate_handler ()
>from /usr/lib/libstdc++.so.6
> #3  0x7f6123d68696 in ?? () from /usr/lib/libstdc++.so.6
> #4  0x7f6123d686c3 in std::terminate () from
> /usr/lib/libstdc++.so.6
> #5  0x7f6123d68f6f in __cxa_pure_virtual () from
> /usr/lib/libstdc++.so.6
> #6  0x0055a1e0 in JobDialer (this=0x7fffcc60, aJob=0x599)
> at AsyncJob.cc:172
> #7  0x005b142d in Adaptation::Initiator::announceInitiatorAbort
> (this=0xc8e9450,
> x...@0xc8e9480) at ../../src/base/AsyncJobCalls.h:33
> #8  0x005b1ad1 in Adaptation::Iterator::noteInitiatorAborted
> (this=0xc8e9438)
> at Iterator.cc:104
> #9  0x0055a7db in JobDialer::dial (this=0x6d7cbb20,
> ca...@0x6d7cbaf0)
> at AsyncJob.cc:215
> #10 0x00559bdb in AsyncCall::make (this=0x6d7cbaf0) at
> AsyncCall.cc:34
> #11 0x0055c270 in AsyncCallQueue::fireNext (this=0xad3000) at
> AsyncCallQueue.cc:53
> #12 0x0055c418 in AsyncCallQueue::fire (this=0xad3000) at
> AsyncCallQueue.cc:39
> #13 0x004ca81c in EventLoop::runOnce (this=0x7fffce20) at
> EventLoop.cc:130
> #14 0x004ca8f8 in EventLoop::run (this=0x7fffce20) at
> EventLoop.cc:94
> #15 0x00513eac in SquidMain (argc=4, argv=0x7fffcfc8) at
> main.cc:1397
> #16 0x00514436 in main (argc=1433, argv=0x599) at main.cc:1159
> (gdb) quit
> 
> 
> What could be the cause and what kind of additional information should
> I provide for better analysis ?
> 
> 
> thanks,
> 
> ---
> 
> Jan
>

[squid-users] Beta testers wanted for 3.2.0.1 - Changing 'workers' (from 1 to 2) is not supported and ignored

2010-08-03 Thread Zeller, Jan (ID)

dear squid list,

i'd like to use the new 'worker' feature in squid-3.2
According to http://www.squid-cache.org/Versions/v3/3.2/cfgman/workers.html 
default is to have only one 'worker'.
Now I'd like to have at least two workers. Unfortunately it doesn't work 

squid[32350]: WARNING: Changing 'workers' (from 1 to 2) is not supported and 
ignored

What am I doing wrong ? Any new compile option I ignored ?

---

Jan

RE: [squid-users] Beta testers wanted for 3.2.0.1 - Changing 'workers' (from 1 to 2) is not supported and ignored

2010-08-04 Thread Zeller, Jan (ID)

> It looks like that message only occurs on a reconfigure. Does "-k
> restart"
> after the config change work?
> 
> Amos

hmm the change applies once squid is restarted but now I am getting :

010/08/04 08:21:20 kid3| commBind: Cannot bind socket FD 12 to [::]: (13) 
Permission denied
.
.

squid is running as 

cache_effective_user  proxy
cache_effective_group proxy

squid processes are running but no listening port. Any clue why this happens ? 

---

Jan

[squid-users] unable to compile 3.2.0.2

2010-09-06 Thread Zeller, Jan (ID)

Dear list,

I am unable to compile 3.2.0.2 

$ ./configure --prefix=/opt/squid-3.2.0.2 --enable-icap-client --enable-ssl 
--disable-translation --disable-auto-locale --enable-linux-netfilter 
--with-pthreads --with-filedescriptors=32768 --enable-storeio=ufs,aufs 
--enable-removal-policies=lru,heap

$ make
.
.
,

mv -f .deps/purge.Tpo .deps/purge.Po
/bin/sh ../../libtool --tag=CXX   --mode=link g++ -Wall -Wpointer-arith 
-Wwrite-strings -Wcom
ments -Werror -pipe -D_REENTRANT -g -O2  -g -o purge convert.o socket.o 
signal.o squid-tlv.o 
copyout.o conffile.o purge.o -L../../lib -lmiscutil ../../compat/libcompat.la 
-lm -lnsl -ldl 
-ldl
libtool: link: g++ -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror 
-pipe -D_REENTRANT -g -O2 -g -o purge convert.o socket.o signal.o squid-tlv.o 
copyout.o conffile.o purge.o  -L
/usr/local/src/squid-3.2.0.2/lib -lmiscutil ../../compat/.libs/libcompat.a -lm 
-lnsl -ldl
/usr/local/src/squid-3.2.0.2/lib/libmiscutil.a(MemPool.o): In function 
`MemPools::flushMeters()':
/usr/local/src/squid-3.2.0.2/lib/MemPool.cc:224: undefined reference to 
`squid_curtime'
/usr/local/src/squid-3.2.0.2/lib/MemPool.cc:225: undefined reference to 
`squid_curtime'
/usr/local/src/squid-3.2.0.2/lib/MemPool.cc:223: undefined reference to 
`squid_curtime'
/usr/local/src/squid-3.2.0.2/lib/libmiscutil.a(MemPoolChunked.o): In function 
`MemPoolChunked::deallocate(void*, bool)':
/usr/local/src/squid-3.2.0.2/lib/MemPoolChunked.cc:357: undefined reference to 
`squid_curtime'
/usr/local/src/squid-3.2.0.2/lib/libmiscutil.a(MemPoolChunked.o): In function 
`MemPoolChunked::convertFreeCacheToChunkFreeCache()':
/usr/local/src/squid-3.2.0.2/lib/MemPoolChunked.cc:380: undefined reference to 
`squid_curtime'
/usr/local/src/squid-3.2.0.2/lib/libmiscutil.a(MemPoolChunked.o):/usr/local/src/squid-3.2.0.2/lib/MemPoolChunked.cc:406:
 more undefined references to `squid_curtime' follow
collect2: ld returned 1 exit status
make[2]: *** [purge] Error 1
make[2]: Leaving directory `/usr/local/src/squid-3.2.0.2/tools/purge'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/local/src/squid-3.2.0.2/tools'
make: *** [all-recursive] Error 1

System used :

$ lsb_release -d
Description:Debian GNU/Linux 5.0.6 (lenny)

$ uname -r
2.6.26-2-686

any hints ?

---

Jan

[squid-users] RE: Two squid servers to talk to each other before the internet

2010-09-07 Thread Zeller, Jan (ID)

> -Original Message-
> From: Tóth Tibor Péter [mailto:tibor.peter.t...@mtv.hu]
> Sent: Dienstag, 7. September 2010 08:38
> To: squid-users@squid-cache.org
> Subject: [squid-users] RE: Two squid servers to talk to each other
> before the internet
> 
> Anybody? Any Idea regarding this problem?
> How can I check if two Squid nodes are talking to each other?
> 
> Thanks,
> Tibby
Hi,

maybe you can 'tcpdump' the ICP traffic to see what's going on. port is

$ grep icp /etc/services 
icpv2   3130/tcpicp # Internet Cache Protocol
icpv2   3130/udpicp

---

Jan

[squid-users] RE: Two squid servers to talk to each other before the internet

2010-09-07 Thread Zeller, Jan (ID)

> -Original Message-
> From: Tóth Tibor Péter [mailto:tibor.peter.t...@mtv.hu]
> Sent: Dienstag, 7. September 2010 09:06
> To: Zeller, Jan (ID)
> Cc: squid-users@squid-cache.org
> Subject: RE: Two squid servers to talk to each other before the
> internet
> 
> Hi,
> Inside of the access.log should I see something where the data is from
> the other cache node?
> Like From SIBLING or something like that ?
> Or the IP of the other node?
> 
> Tibby

another way is to use 'squidclient mgr:server_list'. You'll see something 
similar to this :

Sibling: 
 Host   : /80/3130
 Flags  : multicast-responder
 Address[0] : 
 Status : Up
 FETCHES: 244546 
 OPEN CONNS : 0  
 AVG RTT: 1 msec 
 LAST QUERY : 1261646562 seconds ago
 LAST REPLY :0 seconds ago  
 PINGS SENT :0
 PINGS ACKED:  6385398   0%
 IGNORED:  1859244  29%
 Histogram of PINGS ACKED:
ICP_HIT :   807073  13%
   ICP_MISS :  5577881  87%
   ICP_MISS_NOF :  444   0%
 keep-alive ratio: 50%

---

Jan

[squid-users] RE: unable to compile 3.2.0.2

2010-09-07 Thread Zeller, Jan (ID)

> Dear list,
> 
> I am unable to compile 3.2.0.2
> 
> $ ./configure --prefix=/opt/squid-3.2.0.2 --enable-icap-client --
> enable-ssl --disable-translation --disable-auto-locale --enable-linux-
> netfilter --with-pthreads --with-filedescriptors=32768 --enable-
> storeio=ufs,aufs --enable-removal-policies=lru,heap
> 
> $ make
> .
> .
> ,
> 
> mv -f .deps/purge.Tpo .deps/purge.Po
> /bin/sh ../../libtool --tag=CXX   --mode=link g++ -Wall -Wpointer-arith
> -Wwrite-strings -Wcom
> ments -Werror -pipe -D_REENTRANT -g -O2  -g -o purge convert.o socket.o
> signal.o squid-tlv.o
> copyout.o conffile.o purge.o -L../../lib -lmiscutil
> ../../compat/libcompat.la -lm -lnsl -ldl
> -ldl
> libtool: link: g++ -Wall -Wpointer-arith -Wwrite-strings -Wcomments -
> Werror -pipe -D_REENTRANT -g -O2 -g -o purge convert.o socket.o
> signal.o squid-tlv.o copyout.o conffile.o purge.o  -L
> /usr/local/src/squid-3.2.0.2/lib -lmiscutil
> ../../compat/.libs/libcompat.a -lm -lnsl -ldl
> /usr/local/src/squid-3.2.0.2/lib/libmiscutil.a(MemPool.o): In function
> `MemPools::flushMeters()':
> /usr/local/src/squid-3.2.0.2/lib/MemPool.cc:224: undefined reference to
> `squid_curtime'
> /usr/local/src/squid-3.2.0.2/lib/MemPool.cc:225: undefined reference to
> `squid_curtime'
> /usr/local/src/squid-3.2.0.2/lib/MemPool.cc:223: undefined reference to
> `squid_curtime'
> /usr/local/src/squid-3.2.0.2/lib/libmiscutil.a(MemPoolChunked.o): In
> function `MemPoolChunked::deallocate(void*, bool)':
> /usr/local/src/squid-3.2.0.2/lib/MemPoolChunked.cc:357: undefined
> reference to `squid_curtime'
> /usr/local/src/squid-3.2.0.2/lib/libmiscutil.a(MemPoolChunked.o): In
> function `MemPoolChunked::convertFreeCacheToChunkFreeCache()':
> /usr/local/src/squid-3.2.0.2/lib/MemPoolChunked.cc:380: undefined
> reference to `squid_curtime'
> /usr/local/src/squid-
> 3.2.0.2/lib/libmiscutil.a(MemPoolChunked.o):/usr/local/src/squid-
> 3.2.0.2/lib/MemPoolChunked.cc:406: more undefined references to
> `squid_curtime' follow
> collect2: ld returned 1 exit status
> make[2]: *** [purge] Error 1
> make[2]: Leaving directory `/usr/local/src/squid-3.2.0.2/tools/purge'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory `/usr/local/src/squid-3.2.0.2/tools'
> make: *** [all-recursive] Error 1
> 
> System used :
> 
> $ lsb_release -d
> Description:Debian GNU/Linux 5.0.6 (lenny)
> 
> $ uname -r
> 2.6.26-2-686
> 
> any hints ?
> 
> ---
> 
> Jan

hmm this seems to be related to the operating system / distribution... 
I also compiled on :

$ lsb_release -d
Description:openSUSE 11.2 (i586)

$ uname -r
2.6.31.12-0.2-desktop

like this :

./configure --prefix=/opt/squid-3.2.0.2 --enable-icap-client 
--disable-translation --disable-auto-locale --with-pthreads 
--with-filedescriptors=32768 --enable-storeio=ufs,aufs 
--enable-removal-policies=lru,heap --disable-auth --enable-ssl 
--with-openssl=/opt/openssl-1.0.0a

and it works like a charm.

thanks,

---

Jan

RE: [squid-users] RE: unable to compile 3.2.0.2

2010-09-07 Thread Zeller, Jan (ID)

> It's related to the particular compiler behaviour when working with
> weak-linked libraries and build parallelism. Our libmisc is a bit dated
> and does some unkind things with new/delete that can confuse the
> compiler. Working on a fix.
> 
> PS; beta code and build problems are topics for squid-dev please. Very
> few of the dev team read squid-users.
> 
> Amos
> --
> Please be using
>Current Stable Squid 2.7.STABLE9 or 3.1.8
>Beta testers wanted for 3.2.0.2

Dear Amos, dear list,

the only thing which scared me a bit in regard of subscribing to the squid-dev 
list (http://www.squid-cache.org/Support/mailing-lists.dyn#squid-dev) is to 
present yourself despite the fact that I am only an ordinary SysOp without 
having any background in programming.
I finally just need to test some new promising features like 'workers' and the 
behaviour in a large production environment.

---

Jan

RE: [squid-users] Dual Stack (IPv4,IPv6) Oddities

2010-10-18 Thread Zeller, Jan (ID)

> > I create a tunnel to my server that is running squid using ssh and
> > running with a default (debian) configuration.  My server is
> > dual-stacked (public IPv4 and IPv6 addresses) while the client is a
> > IPv4 only.
> >
> > Over the past few days I have been developing a website and found an
> > oddity on what address is reported specifically from my laptop while
> > using this tunnel.  It appears that Squid is alternating between
> using
> > the IPv4 and IPv6 address (the destination website is also dual
> stack)
> > and as such was making it difficult for myself to deal with these
> > sessions.
> >
> > So this appears to be happening because:
> >
> > * Squid is choosing to use IPv6 and IPv4 randomly /
> > interchangeably causing server side session checking to fail (phpBB
> > has an IP Address check for example)
> >
> > So my question are:
> >
> > * Did I miss something in the configuration file?

hmm my squid boxes are also dual stacked and I was not able to force ipv4 
precedence over ipv6 (see : /etc/gai.conf - http://tools.ietf.org/html/rfc3484)

the only way to force ipv4 was : 

acl dualstackedDOMAIN dstdomain .the.dualstackeddomain.
tcp_outgoing_address  dualstackedDOMAIN

the value 

#For sites which prefer IPv4 connections change the last line to
#
precedence :::0:0/96  100

in /etc/gai.conf seems to be ignored by squid. 

---

Jan

52 matches

Mail list logo