Re: [squid-users] Squid monitoring, access report shows upto 5 % to 7 % cache usage

2013-07-30 Thread John Joseph
Hi Antony thanks for the reply, I have filed up the corresponding information below - Original Message - From: Antony Stone antony.st...@squid.open.source.it To: squid-users@squid-cache.org squid-users@squid-cache.org Cc: Sent: Monday, 29 July 2013 2:45 PM Subject: Re: [squid-users]

[squid-users] question in cache Manager about # of clients and # of hits http

2013-07-30 Thread Ahmad
hi , i have Squid Cache: Version 3.1.6 i have squidclient installed on . here is the result from squidclient : HTTP/1.0 200 OK Server: squid Mime-Version: 1.0 Date: Tue, 30 Jul 2013 07:18:45 GMT Content-Type: text/plain Expires: Tue, 30 Jul 2013 07:18:45 GMT Last-Modified: Tue, 30

Re: [squid-users] Squid monitoring, access report shows upto 5 % to 7 % cache usage

2013-07-30 Thread Amos Jeffries
On 30/07/2013 6:13 p.m., John Joseph wrote: Hi Antony thanks for the reply, I have filed up the corresponding information below - Original Message - From: Antony Stone antony.st...@squid.open.source.it To: squid-users@squid-cache.org squid-users@squid-cache.org Cc: Sent: Monday, 29

[squid-users] Re: Squid monitoring, access report shows upto 5 % to 7 % cache usage

2013-07-30 Thread babajaga
You should install and use http://wiki.squid-cache.org/Features/CacheManager This gives you a lot of info regarding cache performance, like hit rate etc. Having 556 GB of cache within one cache dir might already hit the upper limit of max. number of cached objects, depending upon the avg size

Re: [squid-users] question in cache Manager about # of clients and # of hits http

2013-07-30 Thread Amos Jeffries
On 30/07/2013 7:31 p.m., Ahmad wrote: hi , i have Squid Cache: Version 3.1.6 i have squidclient installed on . here is the result from squidclient : HTTP/1.0 200 OK Server: squid Mime-Version: 1.0 Date: Tue, 30 Jul 2013 07:18:45 GMT Content-Type: text/plain Expires: Tue, 30 Jul

Re: [squid-users] question in cache Manager about # of clients and # of hits http

2013-07-30 Thread Amos Jeffries
On 30/07/2013 7:31 p.m., Ahmad wrote: hi , i have Squid Cache: Version 3.1.6 i have squidclient installed on . here is the result from squidclient : HTTP/1.0 200 OK Server: squid Mime-Version: 1.0 Date: Tue, 30 Jul 2013 07:18:45 GMT Content-Type: text/plain Expires: Tue, 30 Jul

Re: [squid-users] question in cache Manager about # of clients and # of hits http

2013-07-30 Thread Amos Jeffries
On 30/07/2013 7:31 p.m., Ahmad wrote: hi , i have Squid Cache: Version 3.1.6 i have squidclient installed on . here is the result from squidclient : HTTP/1.0 200 OK Server: squid Mime-Version: 1.0 Date: Tue, 30 Jul 2013 07:18:45 GMT Content-Type: text/plain Expires: Tue, 30 Jul

Re: [squid-users] Basic questions on transparent/intercept proxy

2013-07-30 Thread Amm
- Original Message - From: csn233 csn...@gmail.com To: Amm ammdispose-sq...@yahoo.com Cc: Sent: Tuesday, 30 July 2013 2:03 PM Subject: Re: [squid-users] Basic questions on transparent/intercept proxy Thanks to all who replied. Looks like the ssl_bump none all is required to

[squid-users] Re: Squid 3.3.6 FATAL: Received Segment Violation...dying.

2013-07-30 Thread x-man
I produced another binary by compiling on another paltform - this time Ubuntu 12.04 and it looks like this new binary doesn't have this problem... strange enough. Compiled with all the same options/flags. -- View this message in context:

Re: [squid-users] Re: Squid 3.3.6 FATAL: Received Segment Violation...dying.

2013-07-30 Thread Antony Stone
On Tuesday 30 July 2013 at 11:21:55, x-man wrote: I produced another binary by compiling on another paltform - this time Ubuntu 12.04 and it looks like this new binary doesn't have this problem... strange enough. Compiled with all the same options/flags. Which platform did you compile it

Re: [squid-users] Basic questions on transparent/intercept proxy

2013-07-30 Thread csn233
Please use reply all instead of reply! For intercepted proxy, you only use HTTP/HTTPS interception. So browser will access FTP site directly. (Unless you have blocked/redirected FTP port) Amm. Clicked wrong button... It's to do with the requirement to log all traffic, including FTP, as well

[squid-users] icp_query_timeout directive is not working in 3.3.8 for some reason

2013-07-30 Thread x-man
I'm setting icp_query_timeout 9000 because my cache peer is responding a little slowly and this setting was doing great job in squid 3.1, but after migrating in a test installation to 3.3 then again I started seeing in the ACCESS log 30/Jul/2013:15:12:54 +0530 28700 115.127.14.209 TCP_MISS/200

[squid-users] Re: question in cache Manager about # of clients and # of hits http

2013-07-30 Thread Ahmad
hi amos , thanks alot for reply how to know last ip hits for 1 minute ? i dont want to see disctinct for 24 hours . can i know ? -- View this message in context:

Re: [squid-users] Basic questions on transparent/intercept proxy

2013-07-30 Thread Amos Jeffries
On 30/07/2013 9:28 p.m., csn233 wrote: Please use reply all instead of reply! For intercepted proxy, you only use HTTP/HTTPS interception. So browser will access FTP site directly. (Unless you have blocked/redirected FTP port) Amm. Clicked wrong button... It's to do with the requirement to

Re: [squid-users] Re: question in cache Manager about # of clients and # of hits http

2013-07-30 Thread Amos Jeffries
On 30/07/2013 10:38 p.m., Ahmad wrote: hi amos , thanks alot for reply how to know last ip hits for 1 minute ? i dont want to see disctinct for 24 hours . can i know ? You need to scan / grep your log files for that. The squid client-db is only presenting this information as a side

[squid-users] Meaning of negative sizes in store.log

2013-07-30 Thread squid
In the sizes fields of store.log, what do negative sizes mean? For instance, I'm getting this, and I'm interested in knowing the meaning of the -312: ... -1 application/octet-stream 96508744/-312 GET http://au.v4.download.windowsupdate.com/msdownload/update/software Thanks Mark

[squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Ralf Hildebrandt
I had good results replacing 3.3.8 with 3.4.0.1 - no changes to the config were needed. One interesting observation: The dnsreq statistics are different. With 3.3.8 the graphs for requests and replies were identical. Plotted on top of each other -- only one graph could be seen. Since switching

[squid-users] Squid monitering Tool

2013-07-30 Thread javed_samtiah
Hi, Is there any squid monitering tool. *1. I want to monitor Web trafic that which Ip or PC is accessing to which Website. 2. How much bandwidth is utilized by each PC. 3. Want to monitor on real time basis. -- View this message in context:

Re: [squid-users] Squid monitering Tool

2013-07-30 Thread Edmonds Namasenda
Squid Analyzer on http://squidanalyzer.darold.net did me good thanks to Darold. On Tue, Jul 30, 2013 at 2:24 PM, javed_samtiah javed.iq...@northbaysolutions.net wrote: Hi, Is there any squid monitering tool. *1. I want to monitor Web trafic that which Ip or PC is accessing to which Website.

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Amos Jeffries
On 30/07/2013 11:15 p.m., Ralf Hildebrandt wrote: I had good results replacing 3.3.8 with 3.4.0.1 - no changes to the config were needed. One interesting observation: The dnsreq statistics are different. With 3.3.8 the graphs for requests and replies were identical. Plotted on top of each other

[squid-users] Uneven load distribution between SMP Workers

2013-07-30 Thread Tim Murray
Good Afternoon Everyone I'm running Squid 3.3.5 on 3 multicore systems here, using SMP and 6 workers per server dedicated to their own core. Each one running OS RHEL6 U4 with 2.6.32 kernel. I'm noticing as time goes on, some workers seem to be favoured and doing the majority of the work. I've

[squid-users] PURGE not purging with memory_cache_shared on

2013-07-30 Thread Alexandre Chappaz
Hi, from what I have seen, with v3.3.8, PURGE method is not purging if memory_cache_shared is on. posting in pastebin 2 logs with the same requests debug log with 1 worker / memory_cache_shared on : cache.log is here : http://pastebin.archlinux.fr/467269 corresponding to these requests :

Re: [squid-users] Uneven load distribution between SMP Workers

2013-07-30 Thread Eliezer Croitoru
On 07/30/2013 03:44 PM, Tim Murray wrote: I'm a little concerned that the more people I migrate to this solution the more the first 1 or 2 workers will become saturated. Do the workers happen to have some form of source or destination persistance for (SSL?) connections or something that might

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Eliezer Croitoru
On 07/30/2013 03:15 PM, Amos Jeffries wrote: Yes and No. Yes, 3.4 added mDNS support which have no particular guarantee of getting any response. If you do not have mDNS setup the .local requests will timeout instead, before moving on to the global resolution methods. No, because the above

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Ralf Hildebrandt
* Eliezer Croitoru elie...@ngtech.co.il: It's most likely to be the internet DNS infrastructure that is the problem compared to local mDNS. In many cases you can get no response when querying a DNS if you do have a route problem for a sec. And the routing problems suddenly started when I

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Ralf Hildebrandt
* Amos Jeffries squ...@treenet.co.nz: On 30/07/2013 11:15 p.m., Ralf Hildebrandt wrote: I had good results replacing 3.3.8 with 3.4.0.1 - no changes to the config were needed. One interesting observation: The dnsreq statistics are different. With 3.3.8 the graphs for requests and replies

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Eliezer Croitoru
On 07/30/2013 05:18 PM, Ralf Hildebrandt wrote: * Eliezer Croitoru elie...@ngtech.co.il: It's most likely to be the internet DNS infrastructure that is the problem compared to local mDNS. In many cases you can get no response when querying a DNS if you do have a route problem for a sec.

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Ralf Hildebrandt
* Eliezer Croitoru elie...@ngtech.co.il: Well not related to squid directly but yes it can be possible since in the INTERNET there are a lot of packets that just drops.. But that hasn't changed... I should have observed the same drops before going to 3.4.x - looking at the numbers right now:

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Eliezer Croitoru
On 07/30/2013 05:33 PM, Ralf Hildebrandt wrote: The proxy is the only program quering the local DNS server. It's bound to 127.0.0.1 I'm looking at the query.log, but I'm not seeing any queries to .local names at all. Maybe some new code path is not adding to the statistics? Like what? OK

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Ralf Hildebrandt
* Eliezer Croitoru elie...@ngtech.co.il: On 07/30/2013 05:33 PM, Ralf Hildebrandt wrote: The proxy is the only program quering the local DNS server. It's bound to 127.0.0.1 I'm looking at the query.log, but I'm not seeing any queries to .local names at all. Maybe some new code

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Amos Jeffries
On 31/07/2013 2:22 a.m., Ralf Hildebrandt wrote: * Amos Jeffries squ...@treenet.co.nz: On 30/07/2013 11:15 p.m., Ralf Hildebrandt wrote: I had good results replacing 3.3.8 with 3.4.0.1 - no changes to the config were needed. One interesting observation: The dnsreq statistics are different.

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Amos Jeffries
Aha. Digging around in the code I found another way that the queries and replies counters may be getting separated. = all queries are recorded at the point they are sent. = replies are recorded only if the nameserver they are received from is a known NS. So if you have

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Amos Jeffries
On 31/07/2013 2:15 a.m., Eliezer Croitoru wrote: On 07/30/2013 03:15 PM, Amos Jeffries wrote: Yes and No. Yes, 3.4 added mDNS support which have no particular guarantee of getting any response. If you do not have mDNS setup the .local requests will timeout instead, before moving on to the

Re: [squid-users] Meaning of negative sizes in store.log

2013-07-30 Thread Amos Jeffries
On 30/07/2013 10:21 p.m., sq...@peralex.com wrote: In the sizes fields of store.log, what do negative sizes mean? For instance, I'm getting this, and I'm interested in knowing the meaning of the -312: ... -1 application/octet-stream 96508744/-312 GET

Re: [squid-users] Uneven load distribution between SMP Workers

2013-07-30 Thread Alex Rousskov
On 07/30/2013 06:44 AM, Tim Murray wrote: I'm running Squid 3.3.5 on 3 multicore systems here, using SMP and 6 workers per server dedicated to their own core. Each one running OS RHEL6 U4 with 2.6.32 kernel. I'm noticing as time goes on, some workers seem to be favoured and doing the

[squid-users] negotiate_kerberos_auth helpers stay busy

2013-07-30 Thread Klaus Walter
Hi, I am running squid 3.2.1 on CentOS 6.3 with kerberos authentication using negotiate_kerberos_auth. Generally this is working fine, but after some time more and more helper instances stay busy and cannot finish the given request. Therefore squid starts new helper processes to have enough

Re: [squid-users] 3.4.0.1 dnsreq statistics question

2013-07-30 Thread Eliezer Croitoru
On 07/30/2013 07:25 PM, Amos Jeffries wrote: Aha. Digging around in the code I found another way that the queries and replies counters may be getting separated. = all queries are recorded at the point they are sent. = replies are recorded only if the nameserver they are received from is a

Re: [squid-users] negotiate_kerberos_auth helpers stay busy

2013-07-30 Thread Amos Jeffries
On 31/07/2013 9:18 a.m., Klaus Walter wrote: Hi, I am running squid 3.2.1 on CentOS 6.3 with kerberos authentication using negotiate_kerberos_auth. Generally this is working fine, but after some time more and more helper instances stay busy and cannot finish the given request. Therefore squid

Re: [squid-users] Uneven load distribution between SMP Workers

2013-07-30 Thread Tim Murray
On Wed, Jul 31, 2013 at 1:44 AM, Alex Rousskov rouss...@measurement-factory.com wrote: On 07/30/2013 06:44 AM, Tim Murray wrote: I'm running Squid 3.3.5 on 3 multicore systems here, using SMP and 6 workers per server dedicated to their own core. Each one running OS RHEL6 U4 with 2.6.32

[squid-users] Problem with compile squid 3.4.0.1 on RHEL6 x64

2013-07-30 Thread Kris Glynn
Hi, I'm using a squid.spec from squid 3.3 to build 3.4.0.1 but it fails with /usr/bin/ld: ../snmplib/libsnmplib.a(snmp_vars.o): relocation R_X86_64_32 against `.rodata' can not be used when making a shared object; recompile with -fPIC ../snmplib/libsnmplib.a: could not read symbols: Bad value

Fwd: [squid-users] negotiate_kerberos_auth helpers stay busy

2013-07-30 Thread Alan
On Wed, Jul 31, 2013 at 6:59 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 31/07/2013 9:18 a.m., Klaus Walter wrote: strace shows me that this helpers are blocked during a read-command: read(0, r, 1) = 1 read(0, r, 1) = 1 read(0, 7, 1)

Re: [squid-users] Uneven load distribution between SMP Workers

2013-07-30 Thread Alex Rousskov
On 07/30/2013 07:13 PM, Tim Murray wrote: In the meantime, I might see if using separate http_ports for each worker and using the load balancer to even up the spread of traffic will work. It should work as well as the load balancer can balance the load. You might be introducing an additional