Re: [squid-users] Information flodded in logfiles
I've no ideas about the logging facility. But actually, you can try squid -k retate with logrotate program. Regards, -- Banyan He Network System Security Infrastructure Mail: ban...@rootong.com Blog: http://www.rootong.com/blog LinkedIn: http://www.linkedin.com/in/banyanhe Website: http://www.rootong.com From: sandiphw sandi...@hotmail.com Date: Wed, 16 Sep 2009 06:39:50 -0700 (PDT) To: squid-users@squid-cache.org Subject: [squid-users] Information flodded in logfiles Recently I found that logfiles are flooding with informations like access.log 1253094090.451 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094090.675 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094090.728 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094090.791 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094090.853 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094090.916 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094090.978 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094091.041 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094091.104 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094091.166 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094091.214 2365 192.168.40.251 TCP_DENIED/407 1834 GET http://swupmf.adobe.com/manifest/60/win/AdobeUpdater.upd uc NONE/- text/html 1253094091.228 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094091.291 0 192.168.42.30 TCP_DENIED/407 1725 OPTIONS http://ab-desktop/ - NONE/- text/html 1253094091.297 2362 192.168.41.158 TCP_DENIED/407 1834 GET store.log 1253094091.353 RELEASE -1 C22A6119C402EA74195B01ECBBCB178E 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.416 RELEASE -1 7EFAAFD1B02BF3BE93C9E7B6FADB8DA5 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.479 RELEASE -1 319EE692DFCB0B34FD454660195B3F7E 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.541 RELEASE -1 09676C7ACB16372E01BE2CC091E32AEC 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.603 RELEASE -1 5A9DA57ED86A40F79B68105608272ABD 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.666 RELEASE -1 278CF68206B1E065B102B5C97888FBBD 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.728 RELEASE -1 BCBF8DD569006699EBF9ADD91F37B57C 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.791 RELEASE -1 E08AD5AF3E329C7DB2EDD50DC8509502 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.853 RELEASE -1 4088B6F70F4213FF8DB0AC561865C5FB 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.916 RELEASE -1 99D33E36EBE2F2FF7BD0117587015231 407 1253094091 0 1253094091 text/html 1281/1663 OPTIONS http://ab-desktop/ 1253094091.978 RELEASE -1 8FCB9F138361AC4BC44763DEF42D4753 407 1253094091 0 1253094091 Logfiles becomes in over a GB witin 7 days and squid stops working. We need to manually replaced these files with new one. debug_option is set to default. How to stop these informations comming to logfiles? How can I set the maximum size of logfile? Or something else creating the problem? Any advise will be highly appreciated. SKS -- View this message in context: http://www.nabble.com/Information-flodded-in-logfiles-tp25472578p25472578.html Sent from the Squid - Users mailing list archive at Nabble.com.
Re: [squid-users] Possible to setup a broadband connection on Debian?
Not sure the name on DEBIAN, honestly. But I am using it which is called pppoe package on RHLE. It's quite simple. The command starts from adsl-x, you can TAB it. Then you know how to do that I think. Regards, -- Banyan He Network System Security Infrastructure Mail: ban...@rootong.com Website: http://www.rootong.com From: Mark Lodge mlodg...@gmail.com Date: Mon, 20 Jul 2009 02:56:18 +0200 To: squid-users@squid-cache.org Subject: [squid-users] Possible to setup a broadband connection on Debian? My current setup is: Squid Proxy Server- Client PC--- ADSL Router --- Internet Client PC--- Client PC--- I want the Client PC to use the Squid Proxy Server for internet. There are 2 ways i have in mind 1st option: Set the ADSL Router into bridge mode and connect the Squid Proxy Server to the internet via a dial up broadband connection with username and password. 2nd option:Use another server as SUSE router and use that between the client and Squid Proxy Server I want to go with the 1st option but i don't know how to do it. How do you setup a broadband connection on Debian? Thanks Mark
Re: [squid-users] Tuning OS network setting for Squid?
I am working on this as well. Any ideas? I do believe we can start from tcp_sync_backlog. It's pretty better after I increase the value of this. Regards, -- Banyan He Network System Security Infrastructure Mail: ban...@rootong.com Website: http://www.rootong.com From: Jeff Pang pa...@arcor.de Date: Thu, 04 Jun 2009 18:16:39 +0800 To: giob...@gmail.com giob...@gmail.com Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Tuning OS network setting for Squid? giob...@gmail.com: Hi list, I've read some about pre tuning for squid, a lot of thing to do with cache dir, file system etc.. but I am didn't see any advice about network (i.e: reduce timeout, keepalive time ...). Did you do anything like that? From my experience, nothing to do with that, unless you have met special problems with them. -- Jeff Pang DingTong Technology www.dtonenetworks.com
Re: [squid-users] Display how much bandwidth saved
I am using ntop. I would like to choose something more professional. It will provide a better graphic and performance which is good at it. Regards, On 5/26/09 8:33 PM, Maxime Gaudreault mgaudrea...@reference.qc.ca wrote: Hi Is there a way to display how much bandwidth have been saved by using Squid cache ? -- Banyan He Network System Security Infrastructure Mail: ban...@rootong.com Website: http://www.rootong.com
Re: [squid-users] squid + auth + safari + SSL = TCP_DENIED/407
Gavin, Can you attach the squid access log, openssl test prompts? Oh, and maybe error.log Thanks, -- Banyan He Network Security Information System ban...@rootong.com On 5/1/09 12:11 AM, Gavin McCullagh gavin.mccull...@gcd.ie wrote: Hi, one of our Mac people has been complaining that he can't get into certain SSL sites. I borrowed a MAC and found that these does indeed seem to be a problem, though apparently not on all SSL sites (a login on www.bebo.com) is an example that does give the problem. I'm not sure of this but it looks like it might be where there's a POST request over SSL. I noticed this: http://www2.tr.squid-cache.org/mail-archive/squid-users/200709/0109.html so I tried turning off authentication and it worked. I'm using squid-2.6-stable18 which I'm well aware is old. Is this a bug in squid or safari or is this known for sure? Does anyone know if an upgrade to squid would sort it out? If not, I may have to put in an ACL either to allow: - all macs to be unauthenticated - all SSL to be unauthenticated - all requests with safari browser strings using SSL to be unauthenticated or something like that. Has anyone had to do this? Is there a known best way? Thanks in advance, Gavin
