Re: [squid-users] regarding to "cache videos" plugin now as open source

2016-09-06 Thread --Ahmad-- 
i see it as open source now 



https://github.com/kulbirsaini/videocache 



no ??
> On Sep 6, 2016, at 3:04 PM, --Ahmad--  wrote:
> 
> hi squid users 
> 
> just a question
> 
> since the plugin that is called “cache videos “ became now free and open 
> source 
> 
> why i don’t see many users dealing with it ??
> 
> isn’t it  open source  now ??
> 
> 
> i don’t see here  guys who ask about it 
> 
> just curious to know why 
> 
> 
> cheers
> 

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] TCP_RESET non http requests on port 80

2016-09-06 Thread Alex Rousskov 
On 09/06/2016 08:36 AM, Matus UHLAR - fantomas wrote:
> On 05.09.16 23:32, Omid Kosari wrote:
>> Filed a bug report http://bugs.squid-cache.org/show_bug.cgi?id=4585
> 
> I wonder if this is doable at all.

Yes, and Squid supports it in other contexts.


> Does any tcp stack allow sending reset AFTER the connection has been
> opened?

A TCP RESET packet can be sent at any time. This is not something the
protocol can (or needs to!) prohibit.

Alex.

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Copy and send decrypted HTTPS traffic to specific location

2016-09-06 Thread Alex Rousskov 
On 09/04/2016 08:40 AM, Wesley Whitteker wrote:

> I've been doing some testing with Squid and am currently using it to
> decrypt HTTPS flows (i.e. MITM Proxy).  I also have the C-ICAP feature
> working.
> 
> Now, I'm trying to determine if Squid has the capabilities to send a
> copy of decrypted HTTPS traffic out a particular port on the HW platform
> I'm running squid on -- any ideas if this has/can be done?

This is possible using ICAP or eCAP interfaces: Folks write ICAP or eCAP
adapters that reassemble TCP/IP traffic based on the adaptation messages
those adapters receive from Squid and inject that TCP/IP traffic into
the network. Needless to say, the injected traffic is not exactly the
same as the original would have been, but the differences are usually
not important for the logging and analysis tools that receive the
injected TCP/IP packets. It works pretty well, actually.


HTH,

Alex.

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] windows update not working squid 3.5.2

2016-09-06 Thread --Ahmad-- 
/driver/drvs/2015/10/26767_cec6101480492a8c7be6e668ff3284626a787359.cab - 
ORIGINAL_DST/8.253.13.30 application/octet-stream
1473181228.768   1202 192.168.0.10 TCP_MISS/206 1049144 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe
 

 - ORIGINAL_DST/8.253.70.206 application/octet-stream
1473181229.117   1159 192.168.0.10 TCP_MISS/206 1049146 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/26767_cec6101480492a8c7be6e668ff3284626a787359.cab
 

 - ORIGINAL_DST/8.253.70.206 application/octet-stream
1473181229.265984 192.168.0.10 TCP_MISS/206 1049144 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe
 

 - ORIGINAL_DST/8.253.13.46 application/octet-stream
1473181229.525   1207 192.168.0.10 TCP_MISS/206 1049144 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe
 

 - ORIGINAL_DST/8.253.13.46 application/octet-stream
1473181230.066   1314 192.168.0.10 TCP_MISS/206 1049146 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/26767_cec6101480492a8c7be6e668ff3284626a787359.cab
 

 - ORIGINAL_DST/8.253.70.206 application/octet-stream
1473181230.147913 192.168.0.10 TCP_MISS/206 1049146 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/26767_cec6101480492a8c7be6e668ff3284626a787359.cab
 

 - ORIGINAL_DST/8.253.13.46 application/octet-stream
1473181230.166   1659 192.168.0.10 TCP_MISS/206 1049144 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/26767_cec6101480492a8c7be6e668ff3284626a787359.cab
 

 - ORIGINAL_DST/8.253.13.30 application/octet-stream
1473181230.438   1233 192.168.0.10 TCP_MISS/206 1049144 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe
 

 - ORIGINAL_DST/8.253.13.30 application/octet-stream
1473181230.461   1569 192.168.0.10 TCP_MISS/206 1049146 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe
 

 - ORIGINAL_DST/8.253.13.46 application/octet-stream
1473181230.621   1023 192.168.0.10 TCP_MISS/206 1049144 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/26767_cec6101480492a8c7be6e668ff3284626a787359.cab
 

 - ORIGINAL_DST/8.253.13.46 application/octet-stream
1473181231.143   1219 192.168.0.10 TCP_MISS/206 1049144 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe
 

 - ORIGINAL_DST/8.253.13.46 application/octet-stream
1473181231.166   1212 192.168.0.10 TCP_MISS/206 1049144 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/defu/2016/08/am_base_9668287df050e32ce73537e6505b5101ec5dc7f0.exe
 

 - ORIGINAL_DST/8.253.13.46 application/octet-stream
1473181231.528   1131 192.168.0.10 TCP_MISS/206 1049142 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/driver/drvs/2015/10/26767_cec6101480492a8c7be6e668ff3284626a787359.cab

Re: [squid-users] regarding to "cache videos" plugin now as open source

2016-09-06 Thread joe 
http://www.yahoo.com



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/regarding-to-cache-videos-plugin-now-as-open-source-tp4679366p4679381.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] regarding to "cache videos" plugin now as open source

2016-09-06 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
https://www.google.com

:)


06.09.2016 21:26, reinerotto пишет:
>> since the plugin that is called “cache videos “ became now free and open
> source <
> Link, pls.
>
>
>
> --
> View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/regarding-to-cache-videos-plugin-now-as-open-source-tp4679366p4679378.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXzuERAAoJENNXIZxhPexGcJsH/24oHssew54knp4S7AMoqIiw
IIsexy4/gJibM27rTG/NlQFRfWF5hd06tUAk6Zv/TJiTURULgCkqoCC8gKA4kh1v
6HUFQJ+mkm2ZlG7u1d9qRRpieDz/qr58C9pRfkZuzYAaiP8jJIwE7LBqUvOygFih
XDi3F+tg1qZj1fFzfrw7pE1WXyo0+SUhgH2MfocUCc0RPu50wnmMlFvBfoxTSeJh
h4O8PAoGcd8LwfonNIxi+rKAj/VxYOc57Y+q2scM0tfIWKgQc7U+CKH8ul2cUQsl
/qlnh9nxm31/jW36hcq/QDos6Qm1ayqsT9mfzm80l+ssqCG4aRYTNxwvzkaJseA=
=Xux5
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] regarding to "cache videos" plugin now as open source

2016-09-06 Thread reinerotto 
>since the plugin that is called “cache videos “ became now free and open
source <
Link, pls.



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/regarding-to-cache-videos-plugin-now-as-open-source-tp4679366p4679378.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] windows update not working squid 3.5.2

2016-09-06 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
Well, let's see.

06.09.2016 21:12, Ahmed Alzaeem пишет:
> yes i did .
>
> here is conf file  again :
> #
> acl windowsupdate dstdomain windowsupdate.microsoft.com
> acl windowsupdate dstdomain .update.microsoft.com
> acl windowsupdate dstdomain download.windowsupdate.com
> acl windowsupdate dstdomain redir.metaservices.microsoft.com
> acl windowsupdate dstdomain images.metaservices.microsoft.com
> acl windowsupdate dstdomain c.microsoft.com
> acl windowsupdate dstdomain www.download.windowsupdate.com
> acl windowsupdate dstdomain wustat.windows.com
> acl windowsupdate dstdomain crl.microsoft.com
> acl windowsupdate dstdomain sls.microsoft.com
> acl windowsupdate dstdomain productactivation.one.microsoft.com
> acl windowsupdate dstdomain ntservicepack.microsoft.com
>
> acl CONNECT method CONNECT
> acl wuCONNECT dstdomain www.update.microsoft.com
> acl wuCONNECT dstdomain sls.microsoft.com
>
> #http_access allow CONNECT wuCONNECT localnet
> #http_access allow windowsupdate localnet
> ###
> # Updates: Windows
> refresh_pattern -i
windowsupdate.com/.*\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf)
43200 80% 129600 reload-into-ims
> refresh_pattern -i
microsoft.com/.*\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200
80% 129600 reload-into-ims
> refresh_pattern -i
windows.com/.*\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200
80% 129600 reload-into-ims
> refresh_pattern -i
microsoft.com.akadns.net/.*\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf)
43200 80% 129600 reload-into-ims
> refresh_pattern -i
deploy.akamaitechnologies.com/.*\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf)
43200 80% 129600 reload-into-ims
> ###

> refresh_pattern -i
microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80%
43200 reload-into-ims
> refresh_pattern -i
windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320
80% 43200 reload-into-ims
> refresh_pattern -i
windows.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80%
43200 reload-into-ims
Twice refresh pattern. Remove three lines above.

> # DONT MODIFY THESE LINES
> refresh_pattern \^ftp:   144020% 10080
> refresh_pattern \^gopher:14400%  1440
> refresh_pattern -i (/cgi-bin/|\?) 0 0%  0
> refresh_pattern .   0   20% 4320
> #
> ###
> #
> # Recommended minimum configuration:
> #
>
> # Example rule allowing access from your local networks.
> # Adapt to list your (internal) IP networks from where browsing
> # should be allowed
> acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
> acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
> acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
> acl localnet src fc00::/7   # RFC 4193 local private network range
> acl localnet src fe80::/10  # RFC 4291 link-local (directly
plugged) machines
>
> acl SSL_ports port 443
> acl Safe_ports port 80  # http
> acl Safe_ports port 21  # ftp
> acl Safe_ports port 443 # https
> acl Safe_ports port 70  # gopher
> acl Safe_ports port 210 # wais
> acl Safe_ports port 1025-65535  # unregistered ports
> acl Safe_ports port 280 # http-mgmt
> acl Safe_ports port 488 # gss-http
> acl Safe_ports port 591 # filemaker
> acl Safe_ports port 777 # multiling http
> acl CONNECT method CONNECT
>
> #
> # Recommended minimum Access Permission configuration:
> #
> # Deny requests to certain unsafe ports
> http_access allow CONNECT wuCONNECT localnet
> http_access allow windowsupdate localnet
> http_access deny !Safe_ports
>
> # Deny CONNECT to other than secure SSL ports
> http_access deny CONNECT !SSL_ports
>
> # Only allow cachemgr access from localhost
> http_access allow localhost manager
> http_access deny manager
>
> # We strongly recommend the following be uncommented to protect innocent
> # web applications running on the proxy server who think the only
> # one who can access services on "localhost" is a local user
> #http_access deny to_localhost
>
> #
> # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
> #
>
> # Example rule allowing access from your local networks.
> # Adapt localnet in the ACL section to list your (internal) IP networks
> # from where browsing should be allowed
> http_access allow localnet
> http_access allow localhost
>
> # And finally deny all other access to this proxy
> http_access deny all
>
> # Squid normally listens to port 3128
> http_port 192.168.0.1:3128
>
> # Uncomment and adjust the following to add a disk cache directory.
> cache_dir ufs /var/cache/squid 100 16 256
You specify only 100 megabytes sized cache_dir. Where do you think
should be cached updates? For them, just not enough space.
>
> # Leave coredumps in the first cache dir
> coredump_dir

Re: [squid-users] windows update not working squid 3.5.2

2016-09-06 Thread --Ahmad-- 
yes i did .

here is conf file  again :
#
acl windowsupdate dstdomain windowsupdate.microsoft.com 

acl windowsupdate dstdomain .update.microsoft.com 
acl windowsupdate dstdomain download.windowsupdate.com 

acl windowsupdate dstdomain redir.metaservices.microsoft.com 

acl windowsupdate dstdomain images.metaservices.microsoft.com 

acl windowsupdate dstdomain c.microsoft.com 
acl windowsupdate dstdomain www.download.windowsupdate.com 

acl windowsupdate dstdomain wustat.windows.com 
acl windowsupdate dstdomain crl.microsoft.com 
acl windowsupdate dstdomain sls.microsoft.com 
acl windowsupdate dstdomain productactivation.one.microsoft.com 

acl windowsupdate dstdomain ntservicepack.microsoft.com 


acl CONNECT method CONNECT
acl wuCONNECT dstdomain www.update.microsoft.com 

acl wuCONNECT dstdomain sls.microsoft.com 

#http_access allow CONNECT wuCONNECT localnet
#http_access allow windowsupdate localnet
###
# Updates: Windows
refresh_pattern -i windowsupdate.com/.* 
\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 
43200 80% 129600 reload-into-ims
refresh_pattern -i microsoft.com/.* 
\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 
43200 80% 129600 reload-into-ims
refresh_pattern -i windows.com/.* 
\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf) 43200 
80% 129600 reload-into-ims
refresh_pattern -i microsoft.com.akadns.net/.* 
\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf)
 43200 80% 129600 reload-into-ims
refresh_pattern -i deploy.akamaitechnologies.com/.* 
\.(cab|exe|ms[i|u|f|p]|[ap]sf|wm[v|a]|dat|zip|psf)
 43200 80% 129600 reload-into-ims
###
refresh_pattern -i microsoft.com/.* 
\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 
43200 reload-into-ims
refresh_pattern -i windowsupdate.com/.* 
\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 
80% 43200 reload-into-ims
refresh_pattern -i windows.com/.* 
\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 
43200 reload-into-ims
# DONT MODIFY THESE LINES
refresh_pattern \^ftp:   144020% 10080
refresh_pattern \^gopher:14400%  1440
refresh_pattern -i (/cgi-bin/|\?) 0 0%  0
refresh_pattern .   0   20% 4320
#
###
#
# Recommended minimum configuration:
#

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7   # RFC 4193 local private network range
acl localnet src fe80::/10  # RFC 4291 link-local (directly plugged) 
machines

acl SSL_ports port 443
acl Safe_ports port 80  # http
acl Safe_ports port 21  # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70  # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

#
# Recommended minimum Access Permission configuration:
#
# Deny requests to certain unsafe ports
http_access allow CONNECT wuCONNECT localnet
http_access allow windowsupdate localnet
http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# Only allow cachemgr access from localhost
http_access allow localhost manager
http_access deny manager

# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#

# Example rule allowing access from your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access allow localnet
http_access allow localhost

# And finally deny all other access to

Re: [squid-users] windows update not working squid 3.5.2

2016-09-06 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
http://wiki.squid-cache.org/ConfigExamples/Caching/WindowsUpdates

Did you read this?


06.09.2016 20:59, --Ahmad-- пишет:
> hi squid users .
>
> I’m trying to catch windows updates as cached object
> im testing with  windows 10 pc
>
> i see all request as tcp_miss and the caching store is not getting
increase .
>
> =
> 1473173748.014   3603 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173748.022  12146 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173748.057   5321 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173748.155   3684 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173748.355   4832 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173748.612  12645 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173748.650   7276 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173748.720  12654 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173748.816   5064 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173749.022   4159 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173749.048   5618 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173749.177   7817 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173749.208   3383 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173749.318   5096 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173749.395   3986 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173749.850  13837 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173750.015914 192.168.0.10 TCP_MISS/206 1049229 GET
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
- ORIGINAL_DST/13.107.4.50 application/octet-stream
> 1473173750.029   1365 192.168.0.10 TCP_MISS/206 1049229 GET

[squid-users] windows update not working squid 3.5.2

2016-09-06 Thread --Ahmad-- 
hi squid users .

I’m trying to catch windows updates as cached object 
im testing with  windows 10 pc

i see all request as tcp_miss and the caching store is not getting increase .

=
1473173748.014   3603 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173748.022  12146 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173748.057   5321 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173748.155   3684 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173748.355   4832 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173748.612  12645 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173748.650   7276 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173748.720  12654 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173748.816   5064 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173749.022   4159 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173749.048   5618 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173749.177   7817 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173749.208   3383 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173749.318   5096 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173749.395   3986 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173749.850  13837 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173750.015914 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream
1473173750.029   1365 192.168.0.10 TCP_MISS/206 1049229 GET 
http://fg.v4.download.windowsupdate.com/d/msdownload/update/software/crup/2016/08/windows10.0-kb3176938-x64_6e080b0ebebeb8a463a297f5b14fcd03690eb1b8.psf
 - ORIGINAL_DST/13.107.4.50 application/octet-stream

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-09-06 Thread Omid Kosari 
Hey Eliezer,

According to these threads
http://squid-web-proxy-cache.1019090.n4.nabble.com/range-offset-limit-not-working-as-expected-td4679355.html

http://squid-web-proxy-cache.1019090.n4.nabble.com/TProxy-and-client-dst-passthru-td4670189.html

Is there any chance that you implement something that may be used for other
(206 partial) popular sites like download.cdn.mozilla.net . I think it has
also same problem as windows update and has lots of uncachable requests .

Thanks in advance .



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/Windows-Updates-a-Caching-Stub-zone-A-windows-updates-store-tp4678454p4679373.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] TCP_RESET non http requests on port 80

2016-09-06 Thread Matus UHLAR - fantomas 

On 05.09.16 23:32, Omid Kosari wrote:

Filed a bug report http://bugs.squid-cache.org/show_bug.cgi?id=4585


I wonder if this is doable at all.

when squid accepts a connnection, it only can close it without noticing.

Does any tcp stack allow sending reset AFTER the connection has been
opened?

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
LSD will make your ECS screen display 16.7 million colors
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] squid and files cache between multiple pc

2016-09-06 Thread Antony Stone 
On Tuesday 06 September 2016 at 14:58:40, Marco Calegari wrote:

> hi all
> I've a strange problem with squid v3.1.20

That is over four years old.  You should upgrade.

> Using squid also to cache "big" files (for big I mean >20Mb), happens that
> if a pc download a file, first time file has downloaded from internet.
> Second time from squid cache. Everything ok But: if I try to download same
> file from another pc, same file come downloaded from internet and not via
> squid.
> 
> Why?

Thanks for including your squid.conf - that is useful.

However, we also need to see the access.log lines which are generated by the 
three requests:

1. Original request (which downloads from the Internet) from PC1

2. Second request (which gets cached content) from PC1

3. First request (which download from the Internet again) from PC2

By the way, can you confirm that small files do not have the same problem, and 
the cached copy gets sent to PC2 in request number 3 above?


Thanks,


Antony.

-- 
I bought a book about anti-gravity.  The reviews say you can't put it down.

   Please reply to the list;
 please *don't* CC me.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

[squid-users] squid and files cache between multiple pc

2016-09-06 Thread Marco Calegari 
hi all
I've a strange problem with squid v3.1.20

Using squid also to cache "big" files (for big I mean >20Mb), happens that
if a pc download a file, first time file has downloaded from internet.
Second time from squid cache. Everything ok But: if I try to download same
file from another pc, same file come downloaded from internet and not via
squid.

Why?

thanks!

maximum_object_size 5 Gb
cache_dir ufs /data/vmware/squid-cache 30720 16 256
cache_mem 4096 MB

minimum_object_size 0
maximum_object_size_in_memory 512 Kb
cache_replacement_policy heap GDSF

cache_swap_low 85
cache_swap_high 90

half_closed_clients off

hosts_file /etc/hosts
memory_pools off
client_db off
dns_nameservers 127.0.0.1

via off
forwarded_for off
httpd_suppress_version_string off
follow_x_forwarded_for deny all
#visible_hostname sign.bunker.org

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 10080 90% 43200
override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(iso|avi|wav|mp3|mp4|mpeg|swf|flv|x-flv)$ 43200 90%
432000 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(deb|rpm|exe|zip|tar|tgz|ram|rar|bin|ppt|doc|tiff)$
10080 90% 43200 override-expire ignore-no-cache ignore-no-store
ignore-private
refresh_pattern -i \.index.(html|htm)$ 0 40% 10080
refresh_pattern -i \.(html|htm|css|js)$ 1440 40% 40320
refresh_pattern . 0 40% 40320

refresh_pattern -i movies.com/.* 10080 90% 43200
refresh_pattern (*/cgi-bin/*|\?) 0 0% 0
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Squid CPU usage in cachemgr.cgi

2016-09-06 Thread Yuri 
How I know something. In the light of dozens of different operating 
systems. Check the source code, they are also open. Even the top is not 
too reliably shows the load across multiple cores. By the way, SQUID, 
except in very specific configurations, running on a single core.



06.09.2016 18:04, Faheem пишет:
Thanks for that. But do you know the CPU usage shown in the cache 
manager is 24% of the total 4 CPU cores? If it says 100% does that 
mean that all 4 cores are fully utilized?



On Tue, Sep 6, 2016 at 4:05 PM, Yuri > wrote:


http://wiki.squid-cache.org/KnowledgeBase/PerformanceAnalysis


http://wiki.squid-cache.org/SquidFaq/SquidProfiling



06.09.2016 16:01, Faheem пишет:

Hello,

I am trying to setup proper monitoring for our squid farm so that
we will be alerted when there is a performance issue. I was
looking at several statistics of squid available in cachemgr.cgi
and see the below. I am a bit confused about the CPU usage stats
shown in the cachemanager. If I go to 5 Minute Average of
Counters in cachemanager it says "cpu_usage = 24.008036%"

What does this actually mean? Is this inclusive of all 4 cores in
my server? We have CPU affinity set for squid process and it uses
all 4 available cores. So does 100% mean that all 4 cores are
fully being utilized? Which parameter would be the best one to
look at to understand the real CPU usage.


Thanks,
meeh.


___
squid-users mailing list
squid-users@lists.squid-cache.org

http://lists.squid-cache.org/listinfo/squid-users


___ squid-users
mailing list squid-users@lists.squid-cache.org

http://lists.squid-cache.org/listinfo/squid-users
 


___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] regarding to "cache videos" plugin now as open source

2016-09-06 Thread Yuri 
In world of the huge number of all kinds of software. We do not have 
even heard of it, not what to use.



06.09.2016 18:04, --Ahmad-- пишет:

hi squid users

just a question

since the plugin that is called “cache videos “ became now free and open source

why i don’t see many users dealing with it ??

isn’t it  open source  now ??


i don’t see here  guys who ask about it

just curious to know why


cheers

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Squid CPU usage in cachemgr.cgi

2016-09-06 Thread Faheem 
Thanks for that. But do you know the CPU usage shown in the cache manager
is 24% of the total 4 CPU cores? If it says 100% does that mean that all 4
cores are fully utilized?


On Tue, Sep 6, 2016 at 4:05 PM, Yuri  wrote:

> http://wiki.squid-cache.org/KnowledgeBase/PerformanceAnalysis
>
> http://wiki.squid-cache.org/SquidFaq/SquidProfiling
>
> 06.09.2016 16:01, Faheem пишет:
>
> Hello,
>
> I am trying to setup proper monitoring for our squid farm so that we will
> be alerted when there is a performance issue. I was looking at several
> statistics of squid available in cachemgr.cgi and see the below. I am a bit
> confused about the CPU usage stats shown in the cachemanager. If I go to 5
> Minute Average of Counters in cachemanager it says "cpu_usage = 24.008036%"
>
> What does this actually mean? Is this inclusive of all 4 cores in my
> server? We have CPU affinity set for squid process and it uses all 4
> available cores. So does 100% mean that all 4 cores are fully being
> utilized? Which parameter would be the best one to look at to understand
> the real CPU usage.
>
>
> Thanks,
> meeh.
>
>
> ___
> squid-users mailing 
> listsquid-users@lists.squid-cache.orghttp://lists.squid-cache.org/listinfo/squid-users
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

[squid-users] regarding to "cache videos" plugin now as open source

2016-09-06 Thread --Ahmad-- 
hi squid users 

just a question

since the plugin that is called “cache videos “ became now free and open source 

why i don’t see many users dealing with it ??

isn’t it  open source  now ??


i don’t see here  guys who ask about it 

just curious to know why 


cheers

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] range_offset_limit not working as expected

2016-09-06 Thread Amos Jeffries 
On 6/09/2016 9:14 p.m., Omid Kosari wrote:
> It is tproxy cache . Is there a way to force caching them .

No, and trying to do so is a VERY bad idea. I cannot stress enough how
bad it is.  Allowing remote attackers to completely (and invisibly)
bypass almost all other security measures you might have in your
network, just for starters.

I fully realise that not being able to cache a fairly large chunk of CDN
hosted traffic is extremely annoying and also can be costly. But the
risks of this particular vulnerability outweight that price tag.


> current configs:
> host_verify_strict off
> client_dst_passthru on
> 
> dns_nameservers x.y.160.172
> dns_nameservers 217.218.155.155
> dns_nameservers 217.218.127.127
> dns_nameservers 8.8.8.8
> dns_nameservers 8.8.4.4
> dns_nameservers 208.67.222.222
> dns_nameservers 208.67.220.220
> dns_nameservers 208.67.222.220
> dns_nameservers 208.67.220.222
> 
> The first dns server is our caching dns server and its parents dns servers
> are the others which appears in this config . Users dns traffic intercepted
> to x.y.160.172 .
> 
> So the problem seems the cdn dns round-robin . Is there a way to solve that
> ?

Use only that first DNS server in your squid.conf. Using it as an
aggregation point reduces the impact, but only if it is also the sole
point of resolving for Squid.
 NP: this is not a fix, just a workaround to reduce impact until Squid
DNS system can be updated to do things better.

Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Squid CPU usage in cachemgr.cgi

2016-09-06 Thread Yuri 

http://wiki.squid-cache.org/KnowledgeBase/PerformanceAnalysis

http://wiki.squid-cache.org/SquidFaq/SquidProfiling


06.09.2016 16:01, Faheem пишет:

Hello,

I am trying to setup proper monitoring for our squid farm so that we 
will be alerted when there is a performance issue. I was looking at 
several statistics of squid available in cachemgr.cgi and see the 
below. I am a bit confused about the CPU usage stats shown in the 
cachemanager. If I go to 5 Minute Average of Counters in cachemanager 
it says "cpu_usage = 24.008036%"


What does this actually mean? Is this inclusive of all 4 cores in my 
server? We have CPU affinity set for squid process and it uses all 4 
available cores. So does 100% mean that all 4 cores are fully being 
utilized? Which parameter would be the best one to look at to 
understand the real CPU usage.



Thanks,
meeh.


___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Squid CPU usage in cachemgr.cgi

2016-09-06 Thread Faheem 
Hello,

I am trying to setup proper monitoring for our squid farm so that we will
be alerted when there is a performance issue. I was looking at several
statistics of squid available in cachemgr.cgi and see the below. I am a bit
confused about the CPU usage stats shown in the cachemanager. If I go to 5
Minute Average of Counters in cachemanager it says "cpu_usage = 24.008036%"

What does this actually mean? Is this inclusive of all 4 cores in my
server? We have CPU affinity set for squid process and it uses all 4
available cores. So does 100% mean that all 4 cores are fully being
utilized? Which parameter would be the best one to look at to understand
the real CPU usage.


Thanks,
meeh.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] range_offset_limit not working as expected

2016-09-06 Thread Omid Kosari 
It is tproxy cache . Is there a way to force caching them .
current configs:
host_verify_strict off
client_dst_passthru on

dns_nameservers x.y.160.172
dns_nameservers 217.218.155.155
dns_nameservers 217.218.127.127
dns_nameservers 8.8.8.8
dns_nameservers 8.8.4.4
dns_nameservers 208.67.222.222
dns_nameservers 208.67.220.220
dns_nameservers 208.67.222.220
dns_nameservers 208.67.220.222

The first dns server is our caching dns server and its parents dns servers
are the others which appears in this config . Users dns traffic intercepted
to x.y.160.172 .

So the problem seems the cdn dns round-robin . Is there a way to solve that
?




--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/range-offset-limit-not-working-as-expected-tp4679355p4679362.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] TCP_RESET non http requests on port 80

2016-09-06 Thread Omid Kosari 
Filed a bug report http://bugs.squid-cache.org/show_bug.cgi?id=4585



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/TCP-RESET-non-http-requests-on-port-80-tp4679102p4679361.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users