RE: [squid-users] squid 3.2 helpers/external_acl/session compile problem

2011-12-21 Thread yusuf özbilgin
Yes there is a line #define HAVE_DB_H 1. and olsa I tried to compile after changed code like below. But same problem. ext_session_acl.cc #if HAVE_DB_H #include /usr/local/include/db48/db.h #endif From: a...@andybev.com To: ozbil...@hotmail.com CC: squid-users@squid-cache.org

RE: [squid-users] squid 3.2 helpers/external_acl/session compile problem

2011-12-21 Thread Andrew Beverley
On Wed, 2011-12-21 at 10:54 +0200, yusuf özbilgin wrote: On Tue, 2011-12-20 at 20:18 +0200, yusuf özbilgin wrote: Hi, I am getting error when compile helpers/external_acl/session on freebsd 7.4. Error details are below. What can be the problem? Thanks, Yusuf

Re: [squid-users] stopping sslbump to domains with invalid or unsigned certs

2011-12-21 Thread Sean Boran
So, as a test I set SSL_FLAG_DONT_VERIFY_PEER, then modified ssl/support.cc sslCreateClientContext() to ignore SSL_FLAG_DONT_VERIFY_PEER to that it would always verify. Then my three test cases woks just fine. The unsigned cert is refused (although with a not very precise error message to the

RE: [squid-users] squid 3.2 helpers/external_acl/session compile problem

2011-12-21 Thread yusuf özbilgin
Same error. When I remove the line #include db.h Error is different; ++ -DHAVE_CONFIG_H -I../../.. -I../../../include -I../../../lib -I../../../src -I../../../include -I/usr/local/include -I/usr/include -I/usr/include -I/usr/local/include -I/usr/include -I/usr/include -Wall

RE: [squid-users] squid 3.2 helpers/external_acl/session compile problem

2011-12-21 Thread Andrew Beverley
On Wed, 2011-12-21 at 11:52 +0200, yusuf özbilgin wrote: Can you try putting the line back to #include db.h and then remove the #if HAVE_DB_H and #endif lines. Try recompiling, and see what error message you then get. Same error. When I remove the line #include db.h Error is

Re: [squid-users] squid 3.2 helpers/external_acl/session compile problem

2011-12-21 Thread Amos Jeffries
On 21/12/2011 11:20 p.m., Andrew Beverley wrote: On Wed, 2011-12-21 at 11:52 +0200, yusuf özbilgin wrote: Can you try putting the line back to #includedb.h and then remove the #if HAVE_DB_H and #endif lines. Try recompiling, and see what error message you then get. Same error. When I remove

Re: [squid-users] stopping sslbump to domains with invalid or unsigned certs

2011-12-21 Thread Amos Jeffries
On 21/12/2011 10:16 p.m., Sean Boran wrote: So, as a test I set SSL_FLAG_DONT_VERIFY_PEER, then modified ssl/support.cc sslCreateClientContext() to ignore SSL_FLAG_DONT_VERIFY_PEER to that it would always verify. Then my three test cases woks just fine. The unsigned cert is refused (although

Re: [squid-users] stopping sslbump to domains with invalid or unsigned certs

2011-12-21 Thread Sean Boran
On 21 December 2011 12:49, Amos Jeffries squ...@treenet.co.nz wrote: On 21/12/2011 10:16 p.m., Sean Boran wrote: So, as a test I set SSL_FLAG_DONT_VERIFY_PEER, then modified ssl/support.cc sslCreateClientContext() to ignore SSL_FLAG_DONT_VERIFY_PEER to that it would always verify. Then my

Re: [squid-users] Squid with Kerberos auth

2011-12-21 Thread Wladner Klimach
Amos, so what could be causing so much load on cpu? When I run top i can see there's no swap and the squid_kerb_auth is the process that causes this high CPU usage. Is there any way i can check this helper? Here, down low, is my squid.conf. I hope you point some light because i don't believe

Re: [squid-users] stopping sslbump to domains with invalid or unsigned certs

2011-12-21 Thread Christos Tsantilas
On 12/20/2011 04:34 PM, Sean Boran wrote: Hi, sslbump allows me to interrupts ssl connections and run an AV check on them. It generates a certs for the target domain (via sslcrtd), so that the users browser sees a server cert signed by the proxy. If the target domain has a certificate

[squid-users] TCP_MEM_HIT long elapsed time

2011-12-21 Thread feralert
Hi all, Maybe a dump question: why does it take so long for some TCP_MEM_HITS to 'show up', for example i got this: Dec 21 17:37:15 42721 192.X.X.X TCP_MEM_HIT/200 68873 GET http://example.com if TCP_MEM_HIT is a valid copy of the requested object was in the cache and it was in memory, thus

RE: [squid-users] After reloading squid3, takes about 2 minutes to serve pages?

2011-12-21 Thread Henrik Nordström
tis 2011-12-20 klockan 10:48 -0500 skrev Terry Dobbs: I am using Berkley DB for the first time, perhaps that's why it takes longer? Although, I don't really see what Berkley DB is doing for me as I am still using flat files for my domains/urls? Guess I should take this to the squidGuard list!

RE: [squid-users] After reloading squid3, takes about 2 minutes to serve pages?

2011-12-21 Thread Jenny Lee
From: hen...@henriknordstrom.net To: tdo...@associatedbrands.com CC: squid-users@squid-cache.org Date: Wed, 21 Dec 2011 19:36:51 +0100 Subject: RE: [squid-users] After reloading squid3, takes about 2 minutes to serve pages? tis 2011-12-20 klockan 10:48 -0500 skrev Terry Dobbs: I am

Re: [squid-users] TCP_MEM_HIT long elapsed time

2011-12-21 Thread Henrik Nordström
ons 2011-12-21 klockan 18:47 +0100 skrev feralert: Maybe a dump question: why does it take so long for some TCP_MEM_HITS to 'show up', for example i got this: Dec 21 17:37:15 42721 192.X.X.X TCP_MEM_HIT/200 68873 GET http://example.com Possibly ACL processing needing to wait for something

RE: [squid-users] After reloading squid3, takes about 2 minutes to serve pages?

2011-12-21 Thread Henrik Nordström
ons 2011-12-21 klockan 18:44 + skrev Jenny Lee: It takes me a minute and half to reach full load when squid doing 100 req/sec is sent a reconfigure. Squid barely serves anything during this time (but it is functional). All my timeouts are low. It was not like this on 3.2.0.1. How big

Re: [squid-users] After reloading squid3, takes about 2 minutes to serve pages?

2011-12-21 Thread FredB
Le 19/12/2011 18:12, Terry Dobbs a écrit : Hi All. I just installed squid3 after running squid2.5 for a number of years. I find after reloading squid3 and trying to access the internet on a proxy client it takes about 2 minutes until pages load. For example, if I reload squid3 and try to access

[squid-users] Re: Squid with Kerberos auth

2011-12-21 Thread Markus Moeller
Can you run an strace against the process ? Markus Wladner Klimach wlad...@gmail.com wrote in message news:cap3mw_eaz_v+qaqiz+vc1s0oyzawwes1-fdhtezeabfrq7a...@mail.gmail.com... Amos, so what could be causing so much load on cpu? When I run top i can see there's no swap and the

RE: [squid-users] After reloading squid3, takes about 2 minutes to serve pages?

2011-12-21 Thread Jenny Lee
Subject: RE: [squid-users] After reloading squid3, takes about 2 minutes to serve pages? From: hen...@henriknordstrom.net To: bodycar...@live.com CC: squid-users@squid-cache.org Date: Wed, 21 Dec 2011 19:56:37 +0100 ons 2011-12-21 klockan 18:44

Re: [squid-users] TCP_MEM_HIT long elapsed time

2011-12-21 Thread Amos Jeffries
On 22/12/2011 7:55 a.m., Henrik Nordström wrote: ons 2011-12-21 klockan 18:47 +0100 skrev feralert: Maybe a dump question: why does it take so long for some TCP_MEM_HITS to 'show up', for example i got this: Dec 21 17:37:15 42721 192.X.X.X TCP_MEM_HIT/200 68873 GET http://example.com

[squid-users] squid 3.2.0.14 request-too-large

2011-12-21 Thread Eliezer Croitoru
updated to squid 3.2.0.14 and then i'm getting a page of request-too-large while trying to use facebook. so what i did after searching for anything like that in the past of squid to add reply_header_max_size 30 KB to the config and it works but squid is moving so slow so i switched back to

Re: [squid-users] squid 3.2.0.14 request-too-large

2011-12-21 Thread Amos Jeffries
On 22/12/2011 1:13 p.m., Eliezer Croitoru wrote: updated to squid 3.2.0.14 and then i'm getting a page of request-too-large while trying to use facebook. so what i did after searching for anything like that in the past of squid to add reply_header_max_size 30 KB to the config and it works but

Re: [squid-users] squid 3.2.0.14 request-too-large

2011-12-21 Thread Eliezer Croitoru
On 22/12/2011 03:25, Amos Jeffries wrote: On 22/12/2011 1:13 p.m., Eliezer Croitoru wrote: updated to squid 3.2.0.14 and then i'm getting a page of request-too-large while trying to use facebook. so what i did after searching for anything like that in the past of squid to add

Re: [squid-users] squid 3.2.0.14 request-too-large

2011-12-21 Thread Amos Jeffries
On 22/12/2011 2:35 p.m., Eliezer Croitoru wrote: On 22/12/2011 03:25, Amos Jeffries wrote: On 22/12/2011 1:13 p.m., Eliezer Croitoru wrote: updated to squid 3.2.0.14 and then i'm getting a page of request-too-large while trying to use facebook. so what i did after searching for anything like

[squid-users] Disk selection consideration

2011-12-21 Thread Benjamin
Hi, While we are planning for fast disk, h/w vendor tells that for SAS(15k) they suggest raid controller.But as per squid , they do not suggest RAID terminology.So suppose if we use disks as normal each single disk rather than as single raid ( bunch of disk) with raid controller, is has any