I have a web proxy solution (Squid + Dansguardian +75 Ntlm Helpers to
authenticate in the AD) supporting 1500 users.
In the last 3 days the squid started to Die (restart) with the following
errors, about 4 times in the day.
Resume
Warning: all ntlmauthenticator process are busy.
Consider increasing the number of ntlmauthenticator to at least 300
storeDirWriteCleanLogs: Starting ...
Fatal: too many queued ntlmauthenticator requests (376 on 75)
Squid cache : Terminated abnormaly
1 - I was using squid for 5 months and the problem started 3 days ago.
Can a virus or trojan cause this problem?How could I detect it, my squid
has 2 gb logs? Is there any tool or command (grep) that could help me?
- http://www.squid-cache.org/Scripts/
I use (like) calamaris
- MRTG could be used to check traffic going through the SQUID box.
- Check systems logs too , watchout for increase use of system resources
such as swap, for instance due to increased load.
M.
2 - Am I using few authentication helpers for 1500 users? How many
helpers should I use?
3 - Can the size of my logs cause this problem?
Thanks!