Re: [squid-users] TPROXY Timeouts on Select Websites

2012-10-23 Thread Matthew Goff
On Mon, Oct 22, 2012 at 10:40 PM, Amos Jeffries wrote: > If I am reading that correctly you are saying the ICMPv6 'too big' packets > are not going to Squid, but to the client machine? > Which would make it a TPROXY bug, since the outbound connection from Squid > is where the MTU should be lowered

Re: [squid-users] TPROXY Timeouts on Select Websites

2012-10-23 Thread Eliezer Croitoru
On 10/23/2012 1:53 PM, Matthew Goff wrote: I don't know if Squid had already processed the packets for re-writing before Wireshark displays them or not, so I'll check a tcpdump at the router itself to see where it originally directed the packet to before my Squid box had any chance to mangle it.

Re: [squid-users] TPROXY Timeouts on Select Websites

2012-10-23 Thread Matthew Goff
On Mon, Oct 22, 2012 at 10:40 PM, Amos Jeffries wrote: > If I am reading that correctly you are saying the ICMPv6 'too big' packets > are not going to Squid, but to the client machine? I will have to try and run a tcpdump on the edge router itself when I get off work today, but the Wireshark from

Re: [squid-users] TPROXY Timeouts on Select Websites

2012-10-22 Thread Amos Jeffries
On 23/10/2012 11:49 a.m., Matthew Goff wrote: On Sun, Oct 21, 2012 at 9:14 PM, Amos Jeffries wrote: Do you have any info on how far into the system the packets supposedly going to Google get before the hang? and what happens (or not) to cause hang? Thanks; that was enough to get me thinking ab

Re: [squid-users] TPROXY Timeouts on Select Websites

2012-10-22 Thread Matthew Goff
On Sun, Oct 21, 2012 at 9:14 PM, Amos Jeffries wrote: > Do you have any info on how far into the system the packets supposedly going > to Google get before the hang? and what happens (or not) to cause hang? Thanks; that was enough to get me thinking about this a bit differently. I ran Wireshark o

Re: [squid-users] TPROXY Timeouts on Select Websites

2012-10-21 Thread Amos Jeffries
On 22/10/2012 3:02 a.m., Matthew Goff wrote: I've tried searching and didn't see anyone else experiencing this, so I apologize if someone has. I spent yesterday upgrading my Squid install to support TPROXY so I can also intercept my IPv6 traffic that leaves my home via a HE.net tunnelbroker conne

[squid-users] TPROXY Timeouts on Select Websites

2012-10-21 Thread Matthew Goff
I've tried searching and didn't see anyone else experiencing this, so I apologize if someone has. I spent yesterday upgrading my Squid install to support TPROXY so I can also intercept my IPv6 traffic that leaves my home via a HE.net tunnelbroker connection. I worked off both http://www.squid-cach