| BUG: Orphan Comm::Connection:
local=0.0.0.0:3401 remote=[::] FD 11 flags=9
2012/10/22 20:46:23 kid1| NOTE: 1 Orphans since last started.
2012/10/22 20:46:27 kid1| Starting Squid Cache version 3.2.3 for
x86_64-unknown-linux-gnu...
Regards,
Ben
.
2012/10/20 11:47:31|655360 entries written so far.
2012/10/20 11:47:31|720896 entries written so far.
2012/10/20 11:47:31|786432 entries written so far.
2012/10/20 11:47:31| Finished. Wrote 819742 entries.
2012/10/20 11:47:31| Took 0.18 seconds (4520395.05 entries/sec)
Regards,
Ben
? Or is it
resolved in current 3.2 series?
Your inputs are highly appreciated.
BR
Ben
Hi Kinkie,
Thanks for your kind response. Please find the below more entries
before and after FATAL error.
What does it FATAL error says?
2012/10/19 15:22:24| clientProcessRequest: Invalid Request
2012/10/19 15:22:39
: Received Segment Violation...dying.
BR
Ben
Hi,
I noticed one serious issue in squid, squid crashed and that time,
log shows FATAL: Received Segment Violation...dying.. what does it
mean?
Squid Cache: Version 3.1.19
BR
Ben
Hi,
I noticed one serious issue in squid, squid crashed and that time, log
shows FATAL: Received Segment Violation...dying.. what does it mean?
Squid Cache: Version 3.1.19
BR
Ben
server is having squid 3.1.10 and it is working awesome, no
single point of pain from it :)
Upgraded squid version : 3.1.19
OS : Centos 6.2 64 bit
BR
Ben
10.161.128.34 TCP_MISS/504 4831 POST
http://c.brightcove.com/services/messagebroker/amf? -
DIRECT/64.152.208.202 text/html
Any suggestions about getting the rest of the web up running through
our local squid would be most appreciated.
Cheers,
Ben
|Packages(.gz)*)$ 0 20% 2880
refresh_pattern . 0 20% 4320
Ben
On 12 July 2012 04:25, Eliezer Croitoru elie...@ngtech.co.il wrote:
two things:
post a more detailed squid.conf to see if there is something wrong there.
i am using squid3.1.19 and 3.2.16-17
of the cache_peer on the ip leve? ie.
without the cache_peer proxy can you get sites fine?
Without the cache_peer I can not get to any sties at all. All
internet (well, http and https) traffic on our network must go through
the parent proxy, either directly or through a local child proxy.
Thanks again,
Ben
Turns our I just needed the
never_direct allow all
in the right spot of course.
Cheers,
Ben
well the answer is you other mail + the squid.conf
Without the cache_peer I can not get to any sties at all. All
internet (well, http and https) traffic on our network must go through
the parent
Kindly correct me if I am doing mistake
Regards,
Ben
authentication (basic auth - which I continue to rail
against). However, no such luck just yet.
I am still relatively new to squid, and searches along with trial and
error have also been unsuccessful.
Any suggestions would be greatly appreciated.
Cheers,
Ben
.:-)
Regards,
Ben
cc'ing to squid-dev where the people who might know reside
Also, adding debug_options 11,2 may show something useful in the
HTTP flow for 3.2.
Amos
On 15.03.2012 05:59, Erik Svensson wrote:
Hi,
Objects don't get cached in Squid 3.2. Same transactions and config
works in 3.1
On 26/02/2012 6:59 a.m., Ben wrote:
Hi Amos,
On 22.02.2012 03:15, Steve Tatlow wrote:
Hi,
We are running squid as a transparent proxy, with dansguardian
doing the
content filtering. All traffic will be coming from localhost and no
authentication is required. Can someone tell me how I
it stressing the machines. More likely you
will need more DansGuardian proxy processes though, that is where the
heavy CPU consumption will occur.
Amos
Regards,
Ben
Hi Amos,
Thanks for your kind response.
On 7/01/2012 8:32 p.m., Ben wrote:
Hi,
We would like to use squid snmp mibs to get statistics of squid
performance and cache gain.
We are using squid-3.1.10.By reference
ofhttp://wiki.squid-cache.org/Features/Snmp
We have a list of OIDs information
correct for the same.
Regards,
Ben
-destination-port 80 -j redirect --redirect-target ACCEPT
/sbin/iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT
--to-port 3128
Thanks,
Ben
--
Ben Greear gree...@candelatech.com
Candela Technologies Inc http://www.candelatech.com
On 01/25/2011 09:48 AM, Pieter De Wit wrote:
Hi Ben,
There sure is :)
Change the IP Tables rule at the bottom to something like this:
/sbin/iptables -t nat -A PREROUTING -i br0 -p tcp -s 192.168.0.0/24
--dport 80 -j REDIRECT --to-port 3128
Replace the 192.168 with your network. Keep in mind
On 01/25/2011 10:06 AM, Pieter De Wit wrote:
Hi Ben,
On 26/01/2011 06:55, Ben Greear wrote:
On 01/25/2011 09:48 AM, Pieter De Wit wrote:
Hi Ben,
There sure is :)
Change the IP Tables rule at the bottom to something like this:
/sbin/iptables -t nat -A PREROUTING -i br0 -p tcp -s 192.168.0.0
On 01/25/2011 10:36 AM, Ben Greear wrote:
On 01/25/2011 10:06 AM, Pieter De Wit wrote:
Hi Ben,
On 26/01/2011 06:55, Ben Greear wrote:
On 01/25/2011 09:48 AM, Pieter De Wit wrote:
Hi Ben,
There sure is :)
Change the IP Tables rule at the bottom to something like this:
/sbin/iptables -t nat
On 01/25/2011 11:14 AM, Pieter De Wit wrote:
Hi Ben,
I suspect that will do the trick :)
It seems it was a tad more tricky, but this appears to be working:
sbin/ebtables -t broute -A BROUTING -i br0 --logical-in veth2 -p IPv4
--ip-protocol 6 --ip-destination-port 80 -j redirect --redirect
in advance for any help you may provide,
Ben Miller
6 X 9 = 42
. Any thoughts welcomed.
Yours in confusion,
Ben Stokes
as
far as negotiating a protocol level.
Consider: If you telnet squid 8080 and type bogus and hit
[ENTER], what HTTP protocol version is that?
-- Ben
HTTP/1.1 at all. I
guess 3.1 is supposed to have more support for HTTP/1.1.
-- Ben
On Fri, May 29, 2009 at 11:22 AM, Maxime Gaudreault
mgaudrea...@reference.qc.ca wrote:
Is there a way to delete objects in the cache that are unused for X days
Squid manages the cache automatically. The least recently used
objects are removed as needed.
-- Ben
and refuses
to attempt the restart if it's not valid.
-- Ben
see the same thing with Squid 2.6.STABLE6 on CentOS 5.
Turning of the advanced attachment feature of Gmail works around
the problem. (The advanced attachment uses Adobe Flash, if that
helps anyone figure out a cause.)
-- Ben
memory pools work. If my extended code uses only xmalloc() for
dynamic memory, do those objects automatically become candidates for
storage in a memory pool when freed? Or do I have to do something
special to associate them with a memory pool?
Thanks,
Ben
Ben Drees wrote:
After Squid has been up for a day or two handling about 500 (mostly
cacheable) requests per second, we start to see CPU spikes reaching
100% and response times getting longer. It usually recovers on its
own, but we sometimes resort to restarting it, which always fixes
for
maximum requests per second and cache hit rates?
Any help or pointers would be greatly appreciated.
Best Regards,
Ben Jonston
for
maximum requests per second and cache hit rates?
Any help or pointers would be greatly appreciated.
Best Regards,
Ben Jonston
Hi,
We're using Squid 2.6 as a reverse proxy and load balancer. Does anyone
out there have experience concerning the maximum number of origin
servers Squid can load balance before problems start to arise? Are
other limits likely to come into play that make this one moot?
Thanks,
Ben
no-query originserver login=PASS
name=INTERNALNAME2-peer sourcehash
cache_peer_access INTERNALNAME1-peer allow sites_INTERNALNAME
cache_peer_access INTERNALNAME2-peer allow sites_INTERNALNAME
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
are not the intended recipient,please
contact the sender by reply e-mail and destroy all copies
of the original message.
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Medical Center;Information Technology
adr:;;1600 S. 48th St.;Lincoln;NE;68506-1275;USA
email;internet:[EMAIL PROTECTED
of the original message.
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Medical Center;Information Technology
adr:;;1600 S. 48th St.;Lincoln;NE;68506-1275;USA
email;internet:[EMAIL PROTECTED]
title:Systems Programmer
tel;work:402-481-8582
tel;fax:402-481-8354
url:http
Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S. 48th St.;Lincoln;NE;68506;USA
email;internet:[EMAIL PROTECTED]
title:Systems Programmer
tel;work:402-481-8582
tel;fax:402-481-8354
tel;cell:402-432-5334
url:http://www.bryanlgh.org
version:2.1
end:vcard
1 N/A
User Cache Maintenance 3102.819286 seconds 1 N/A
storeDigestRebuildStart 3103.252835 seconds 1 N/A
storeDigestRewriteStart 3103.278672 seconds 1 N/A
peerDigestCheck 141057.508629 seconds 1 yes
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
(3, {}, 256, 0) = 0
as fast as my screen will scroll. Restarting squid makes it settle down
again for a while. This server sees only a few hits an hour. What's
causing this, and how do I stop it?
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System
server so as
to maintain session state the like? I don't want to split them up
manually using ACL's; I want squid to do this for me while allowing for
down servers (see above).
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S. 48th
Ben Hollingsworth wrote:
I've got squid running as a reverse proxy, terminating HTTPS requests
and forwarding them to HTTP(S) servers on the inside. I've now gotten
a request to use this same proxy to load balance requests between
multiple internal servers. It looks like you can do
urllist blacklists/warez/urls
# The verbose option logs all hits -- even those that pass.
# Without verbose, only redirected/rewritten hits are logged.
log verbose warez.log
}
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S
..
We use a combination of calamaris and cacti/SNMP to get all those stats.
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S. 48th St.;Lincoln;NE;68506;USA
email;internet:[EMAIL PROTECTED]
title:Systems Programmer
tel;work:402
permanent redirect back to the browser.
# http://wiki.squid-cache.org/SquidFaq/SquidRedirectors
#
$| = 1;
while () {
s/^http:/301:https:/; # replace http with https
print;
}
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
Sending HTTP request.
HTTP request sent; waiting for response.
Can't Access `https://docs.bryanlgh.org/'
Alert!: Unable to access document.
lynx: Can't access startfile
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S. 48th St
Ben Hollingsworth wrote:
I've setup Squid 2.6.STABLE6 as a reverse proxy. It terminates SSL
connections using a wildcard cert and then passes the connections to
back-end servers using either HTTP or HTTPS. All works well for
servers that don't require any authentication (or which let the web
Ben Hollingsworth wrote:
I've setup Squid 2.6.STABLE6 as a reverse proxy. It terminates SSL
connections using a wildcard cert and then passes the connections to
back-end servers using either HTTP or HTTPS. All works well for
servers that don't require any authentication (or which let the web
/ *#.*//' squid.conf | sed -e '/^$/d'
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S. 48th St.;Lincoln;NE;68506;USA
email;internet:[EMAIL PROTECTED]
title:Systems Programmer
tel;work:402-481-8582
tel;fax:402-481-8354
tel;cell:402-432
. Thanks so much for
all your help, Amos.
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S. 48th St.;Lincoln;NE;68506;USA
email;internet:[EMAIL PROTECTED]
title:Systems Programmer
tel;work:402-481-8582
tel;fax:402-481-8354
tel;cell
;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S. 48th St.;Lincoln;NE;68506;USA
email;internet:[EMAIL PROTECTED]
title:Systems Programmer
tel;work:402-481-8582
tel;fax:402-481-8354
tel;cell:402-432-5334
url:http://www.bryanlgh.org
version:2.1
end:vcard
[EMAIL PROTECTED]
coredump_dir /var/spool/squid
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S. 48th St.;Lincoln;NE;68506;USA
email;internet:[EMAIL PROTECTED]
title:Systems Programmer
tel;work:402-481-8582
tel;fax:402-481-8354
tel
on WinXP and with
Firefox on Ubuntu Linux.
Has anybody seen this behavior before, or heard anything that would indicate
the conversion is a security feature?
begin:vcard
fn:Ben Hollingsworth
n:Hollingsworth;Ben
org:BryanLGH Health System;Information Technology
adr:;;1600 S. 48th St.;Lincoln;NE;68506
the opening of new connections but allows existing
persistent connections to be reused?
Does anyone have insight on these?
Thanks,
Ben
patch to deal with responses inappropriately
transfer-encoded by origin servers?
What sorts of things would break if Squid advertised itself as an HTTP
1.1 client?
Thanks,
Ben
Ben Drees wrote:
I'm running Squid 2.6 STABLE12 as a reverse proxy. The origin servers
are Apaches (2.0.58) configured to gzip most responses (which are all
dynamic) with mod_deflate. The fact that Squid is an HTTP 1.0 client
has the undesirable effect, in this scenario, that every compressed
to be used
#for:
#* In-Transit objects
#* Hot Objects
#* Negative-Cached objects
Thanks,
Ben
I did some research for an answer to this question, but, things tend to
always resort to CPU usage and tuning (though, I did get some good
information from those threads also).
We have a squid appliance which is very heavy on CPU (which is
expected). My question isn't really how can I tune it or
than in memory, the TCP_IMS_HIT case should only
need to consult an in-memory index structure and reply with a 304, right?
Thanks,
Ben
thing and route to the other Squid for
uninterrupted service. Is there any way to achieve this in Squid 2.5
STABLE12 or later?
Thanks,
Ben
Henrik Nordstrom wrote:
fre 2006-08-25 klockan 09:24 -0700 skrev Jim John:
Hi all. We have squid set up for transparency using shorewall, but it takes
-08-10 klockan 16:52 -0700 skrev Ben Drees:
Users are complaining that they are challenged to re-enter their
credentials too frequently.
Then something is wrong somewhere. They should only need to enter their
credentials once, just as for basic..
I figured nonce_max_duration would
this happens with a variety
of browsers - sorry no more details are available.
Thanks,
Ben
is low, and squid is
not using much memory.
My squid configuration is at the end of this message. Can anyone give
advice on how to trouble-shoot this or ideas on what I may be doing
wrong?
Thank you,
Ben
http_port 127.0.0.1:3128
icp_port 0
udp_incoming_address XXX.XXX.XXX.XXX
be most
appreciative!
Regards,
Ben Hathaway
Software Developer
http://www.spidersat.net
Spidersat Logo
-Original Message-
From: Andrew Yoward [mailto:[EMAIL PROTECTED]
Sent: 13 July 2006 19:17
To: squid-users@squid-cache.org
Subject: [squid-users] Issues with Debian, Squid and WCCP
and then download these files in a cron
job. However, this is a little bit like re-inventing the wheel just because
you want a blue one. (shameless Hitchhikers guide to the Galaxy reference)
Any suggestions?
My thanks in advance,
Ben Hathaway
Software Developer
http://www.spidersat.net
to improve this?
Many thanks,
Ben.
-Original Message-
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Sent: 18 June 2006 00:43
To: Chris Robertson
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] 4 second Cache Miss Service Times
fre 2006-06-16 klockan 12:43 -0800 skrev Chris
Regards,
Ben Hathaway
: x.y.z:8101
-Ben
to do this
kind of load balancing also, offering a convenient place to code custom
health checks.
Are there any other options?
-Ben
[EMAIL PROTECTED] wrote:
Hi all,
I just want to know if theres other way to cluster 2 or more Squid-cache/proxy?
My idea of clustering 2 or more proxy
Squid.
I haven't found any direct comparisons of the two on the web.
-Ben
[EMAIL PROTECTED] wrote:
Are there any resources that compare using Squid as a reverse proxy versus
Apache? We currently use Apache as our reverse proxy, and do some url
rewriting, and cookie based conditional url
Aurelien Requiem wrote:
I've got the same problem with firefox (w/o squid).
It seems you can't resolve a hostname starting with a minus.
Werner Rost wrote:
Come on, some of you must know the solution to this one.
You might find it useful to read RFC 1035:
Domain Names: Implementation and
you should be able to do something like:
% sudo -u squid squidguard
And that will execute the command as squid.
Hope that helps,
Ben
make that identical to the wpad.dat file,
and set the mime type up for the .pac in the same way.
Hope that helps.
Ben
--
Benjamin Tanner BSc (Hons) MBCS
Senior Computing Officer
Network Support Unit, Computing Service
Network Operations Centre, KentMAN Ltd.
Canterbury Christ Church University
E
port.
Thank You
Ben
You miss understood me, I know all communication from the squid to the
backend is unencrypted. What I want is for squid to log weather to
client web browser connected to the http port or the https port of
squid this information to be sent to the redirector.
Ben
On 05/12/05, Matus UHLAR
if the client IP
is in the specified IP range.
Hope that helps,
Ben
--
Ben Tanner
Senior Computing Officer
Network Support Unit
E-Mail: [EMAIL PROTECTED]
Phone: 2977
Hi all,
What configuration must have iptables for use wccp?
Suse 9.3
Kernel 2.6
Wccp V1
IOS 12.x
Regards
Ben
Hi everbody
What is the Hardware Systems Requirements the squid for 10,000 clients?
thanks
Regards
Ben
hi Kumara
check it
http://squid.visolve.com/squid/configuration_manual_24.htm
Regards
Ben
- Original Message -
From: Kumara Jayaweera [EMAIL PROTECTED]
To: squid-users@squid-cache.org
Cc: squid-users@squid-cache.org
Sent: Monday, October 24, 2005 11:13 AM
Subject: [squid-users
ok, so I use ip_wccp with Wccp V1, but the cache don´t see the router
or
router don´t see cache
Is your router supporting WCCP v1?
Yes, My router supportWCCP v1 and support WCCP v2
2005/10/19 09:26:30| Ignoring WCCP_I_SEE_YOU from X.X.X.X with
non-positive
number of caches
Odd..
| storeLateRelease: released 0 objects
2005/10/19 09:26:30| Ignoring WCCP_I_SEE_YOU from X.X.X.X with non-positive
number of caches
x.x.x.x is IP router.
Regards
Ben
- Original Message -
From: Rénald CASAGRAUDE [EMAIL PROTECTED]
To: squid-users@squid-cache.org
Sent: Wednesday, October 19, 2005 4:37
Hello Squid Users,
I am planning to implement wccp with squid, using the following:
1- WBEL 4.0
2- Version 2.5.STABLE3
3- Cisco 7206 IOS 12.2
I would like to know if any body have any experience with this setup to
guide me with resources or URLS dealing with this case plus his own
experience.
I
Hash Allotment:256 (100.00%)
Packets Redirected:46481
Connect Time: 00:20:15
What´s wrong?
Best Regards,
- Original Message -
From: Shoebottom, Bryan [EMAIL PROTECTED]
To: Ben [EMAIL PROTECTED]; squid-users@squid-cache.org
Sent
I have squid listening of multiople ports, is there a way to pass
which of these ports the client connected on to an external acl?
Ben
The https port is not related to https proxying and should probably be
removed. To proxy https, in your browser, set the https proxy port to
3128 (or whatever you have set the standard http port to).
Ben
On 07/10/05, Ibrahim Calisir [EMAIL PROTECTED] wrote:
thank you, for your quick reply
Is the a way to pass the mac address of the client to an external acl.
Ben
Hi,
I'm running squid 3.0-PRE3 on fedora core 3 and several times a day squid is
crashing with the below error
I can't seem to find any info about this particular error on the web. Any
ideas?
Thanks,
Ben
Squid: 3.0-PRE3-20040704
OS: redhat fc3 (2.6.11-1.35_FC3smp)
Error in cache.log...
2005
Thanks for the reply. Is this the patch I need:
http://devel.squid-cache.org/cgi-bin/diff2/ssl-2_5?s2_5 ?
I can not seem to find the configuration directive(s) I should be using. The
ones pertaining to CA's seem to apply to Squid's ability to verify the
client certificate.
Thanks,
Ben
/squid/secure.lowellma.gov.key
Any help would be greatly appreciated.
Ben Hirsch
[EMAIL PROTECTED] / [EMAIL PROTECTED]
Application Developer
City of Lowell, Massachusetts
http://www.lowellma.gov/
Is it possible to run two copies of squid concurrently (same
executable + cache etc, just different config files)?
Ben
I have tried this but it complains that there is already a copy of squid running
On 26/09/05, dirk.duenkelmann [EMAIL PROTECTED] wrote:
Yes, it is:
squid -f configfile
Dirk
-Ursprüngliche Nachricht-
Von: Ben Sagal [mailto:[EMAIL PROTECTED]
Gesendet: Montag, 26. September 2005
Thank you,
I have now got both running (with differnt cache dirs)
Ben
On 26/09/05, dirk.duenkelmann [EMAIL PROTECTED] wrote:
Sorry Ben,
Neil is right: You need different cache directories in the second
configfile, too.
Dirk
-Original Message-
From: Neil A. Hillard [mailto
the permissions are 777
Please advise.
Thanks
Ben
2005 10:44 AM
To: Ben; squid-users@squid-cache.org
Subject: Re: [squid-users] squid failed. The error was: init_cache_dir
Try to check /var/log/messages
- Original Message -
From: Ben [EMAIL PROTECTED]
To: squid-users@squid-cache.org
Sent: Monday, July 25, 2005 3:46 AM
Subject
configuration. At least when squid first starting up, it will create
cache.log
- Original Message -
From: Ben [EMAIL PROTECTED]
To: Gert Brits [EMAIL PROTECTED]; squid-users@squid-cache.org
Sent: Monday, July 25, 2005 6:23 AM
Subject: RE: [squid-users] squid failed. The error
for a
username and password. However when going via the proxy this doesn't happen.
I have seen lots of information about authentication settings - are they
anything to do with this? Is it possible to authenticate yourself with
windows, via a proxy, in this way?
Thanks
Ben
, if they are in the blocklist,
they reject the email. IS there a similar system where the url can be
checked against separate remote blacklists of a)advert site b)port
c)warez...
I'd appreciate any advice on whether there is anything for windows that
works in either of these two methods.
Thanks
Ben
? If it is, would it become very slow?
What squid.conf settings would I use to require one instance to pass all
traffic onto another proxy?
Thanks
Ben
it at the moment.
Thanks
Ben
PS Someone is harvesting the email addresses on this list to spam to. If
you're reading this ... please stop!
as to where this
path is to be found apart from in the conf file.
Thanks for your help,
Ben
101 - 200 of 226 matches
Mail list logo