Hi,
I am experiencing
the following problem: Squid does not get any I_SEE_YOU messages and the
router prints out "Here_I_Am packet from 192.168.3.20 w/bad rcv_id 0000000"
Here is the setup and what is happening in more detail:
SQUID BOX
========
IP: 192.168.3.20
Squid 2.6STABLE9, kernel 2.4.32 or 2.6.16, for now the kernel version does not
seem to matter.
For now I use one squid and one router. But once I get this to work, I plan on
using 2 routers and most likely a second squid. Thus the dynamic
configuration.
squid.conf wccp2 settings:
wccp2_router 192.168.3.21
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_assignment_method 1
wccp2_service dynamic 97 password=exPAS12
wccp2_service_info 97 protocol=tcp flags=src_ip_hash,ports_source priority=240
ports=80
wccp2_weight 10000
CISCO 2621
========
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-I-M), Version 12.0(3)T3, RELEASE SOFTWARE
(fc1)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Thu 15-Apr-99 15:41 by kpma
Image text-base: 0x80008088, data-base: 0x80693A88
ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
part of 'show conf':
ip wccp 97 password exPAS12
ip name-server 192.168.1.253
ip name-server 192.168.1.252
!
interface FastEthernet0/0
ip address 192.168.3.21 255.255.255.0
no ip directed-broadcast
ip wccp 97 redirect out
no ip mroute-cache
STARTING SQUID
============
If I start squid I get the following output on the CISCO:
23:30:08: WCCP-EVNT:D97: Web Cache 192.168.3.20 added
23:30:18: WCCP-EVNT:D97: Built new router view: 1 routers, 1 usable web
caches, change # 00000030
if I restart squid I get the following on CISCO:
23:31:03: WCCP-EVNT:D97: Here_I_Am packet from 192.168.3.20 w/bad rcv_id
0000000
eventually, I get this:
23:50:06: WCCP-EVNT:D97: Redirect_Assignment packet from 192.168.3.20 fails
source check
I do not get any I_SEE_YOU messages in squid's cache.log
The only wccp2 related messages are :
2007/02/08 11:14:22| WCCP Disabled.
2007/02/08 11:14:22| Accepting WCCPv2 messages on port 2048, FD 48.
2007/02/08 11:14:22| Initialising all WCCPv2 lists
TCPDUMP
======
in order to be sure that udp packets are coming through, I captured the
traffic while starting squid
# tcpdump -X -s 1600 -n -i any -p port 2048 &
# squid
11:16:13.481972 IP 192.168.3.20.2048 > 192.168.3.21.2048: UDP, length 160
0x0000: 4500 00bc f920 0000 4011 f996 c0a8 0314 [EMAIL PROTECTED]
0x0010: c0a8 0315 0800 0800 00a8 ceb5 0000 000a ................
0x0020: 0200 0098 0000 0014 0000 0001 67ae 4954 ............g.IT
0x0030: 3716 c97d e9fa fcf5 973d c4e6 0001 0018 7..}.....=......
0x0040: 0161 f006 0000 0031 0050 0000 0000 0000 .a.....1.P......
0x0050: 0000 0000 0000 0000 0003 002c c0a8 0314 ...........,....
0x0060: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0070: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0080: 0000 0000 2710 0000 0005 0014 0000 0001 ....'...........
0x0090: 0000 0001 c0a8 0315 0000 0000 0000 0000 ................
0x00a0: 0008 0018 0001 0004 0000 0001 0002 0004 ................
0x00b0: 0000 0001 0003 0004 0000 0001 ............
11:16:13.493933 IP 192.168.3.21.2048 > 192.168.3.20.2048: UDP, length 156
0x0000: 4500 00b8 1cba 0000 ff11 1701 c0a8 0315 E...............
0x0010: c0a8 0314 0800 0800 00a4 7651 0000 000b ..........vQ....
0x0020: 0200 0094 0000 0014 0000 0001 8fb9 abcb ................
0x0030: fa5b 24d3 1dc9 57f3 a8b1 a8bb 0001 0018 .[$...W.........
0x0040: 0161 f006 0000 0031 0050 0000 0000 0000 .a.....1.P......
0x0050: 0000 0000 0000 0000 0002 0014 c0a8 0315 ................
0x0060: 0000 1c35 c0a8 0315 0000 0001 c0a8 0314 ...5............
0x0070: 0004 0044 0000 0030 c0a8 0314 0000 0001 ...D...0........
0x0080: 0000 0001 c0a8 0315 0000 0001 c0a8 0314 ................
0x0090: 0000 0000 ffff ffff ffff ffff ffff ffff ................
0x00a0: ffff ffff ffff ffff ffff ffff ffff ffff ................
0x00b0: ffff ffff 2710 0000 ....'...
11:16:18.543117 IP 192.168.3.21.2048 > 192.168.3.20.2048: UDP, length 80
0x0000: 4500 006c 1cbb 0000 ff11 174c c0a8 0315 E..l.......L....
0x0010: c0a8 0314 0800 0800 0058 1e0a 0000 000d .........X......
0x0020: 0200 0048 0000 0014 0000 0001 f7b9 dfbe ...H............
0x0030: 51e7 c37e f30e bbb7 623e efe4 0001 0018 Q..~....b>......
0x0040: 0161 f006 0000 0031 0050 0000 0000 0000 .a.....1.P......
0x0050: 0000 0000 0000 0000 0007 0010 c0a8 0315 ................
0x0060: 0000 1c36 c0a8 0315 c0a8 0314 ...6........
11:16:23.485739 IP 192.168.3.20.2048 > 192.168.3.21.2048: UDP, length 160
0x0000: 4500 00bc f921 0000 4011 f995 c0a8 0314 [EMAIL PROTECTED]
0x0010: c0a8 0315 0800 0800 00a8 6976 0000 000a ..........iv....
0x0020: 0200 0098 0000 0014 0000 0001 1c32 0c8e .............2..
0x0030: d72a 3ab8 5bc7 3976 3432 39a3 0001 0018 .*:.[.9v429.....
0x0040: 0161 f006 0000 0031 0050 0000 0000 0000 .a.....1.P......
0x0050: 0000 0000 0000 0000 0003 002c c0a8 0314 ...........,....
0x0060: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0070: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0080: 0000 0000 2710 0000 0005 0014 0000 0001 ....'...........
0x0090: 0000 0001 c0a8 0315 0000 1c35 0000 0000 ...........5....
0x00a0: 0008 0018 0001 0004 0000 0001 0002 0004 ................
0x00b0: 0000 0001 0003 0004 0000 0001
if I view this (tcpdump -w dump -X -s 1600 -n -i any -p port 2048) in
ethereal, I can see that "Here I am" and "I see you" messages are sent back
and forth. I can email you the dump, the mailing list does not permit
attachments.
What did I do wrong or miss?
Any pointers are more than appreciated.
Thank you!
Regards,
Martin
