[squid-users] More info on FreeBSD 4.8 + GRE pseudo-device + WCCP

Hi all,

This is an update of my previous post regarding this topic. I re-compiled my
kernel with the BPF pseudo-device and ran tcpdump:

        squid# tcpdump -w tcpdump.out tcp dst port 80
        tcpdump: listening on sis0

After a while, stopped the tcpdump process and read the output file,
tcpdump:

squid# tcpdump -x -n -r tcpdump.out

11:58:52.446987 219.140.60.2.4871 > 202.91.166.6.80: S
4093989299:4093989299(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
                         4500 0030 eaf0 4000 6b06 9ce6 db8c 3c02
                         ca5b a606 1307 0050 f405 51b3 0000 0000
                         7002 4000 621e 0000 0204 05b4 0101 0402

This is the only packet that contains a destination port of 80!

On the Cisco router:

Router# show ip wccp web-cache

Global WCCP information:
    Router information:
        Router Identifier: 202.91.x.x
        Protocol Version: 1.0

    Service Identifier: web-cache
        Number of Cache Engines: 1
        Number of routers: 1
        Total Packets Redirected: 22 <-- take note
        Redirect access-list: -none-
        Total Packets Denied Redirect: 0
        Total Packets Unassigned: 0
        Group access-list: -none-
        Total Messages Denied to Group: 0
        Total Authentication failures: 0

Back to the squid server, here's the output of ifconfig:

sis0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 202.91.x.x netmask 0xffffffe0 broadcast 202.91.x.x
        ether 00:e0:18:ec:cb:37
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        inet 127.0.0.1 netmask 0xff000000
gre0: flags=9051<UP,POINTOPOINT,RUNNING,LINK0,MULTICAST> mtu 1476
        tunnel inet 202.91.x.x --> 202.91.x.x
        inet 202.91.x.x --> 202.91.x.x netmask 0xffffffff

Here's the output of ipfw:

00001 15787 2074120 allow tcp from 202.91.x.x to any
00002 343 18623 fwd 127.0.0.1,8080 tcp from any to any dst-port 80
65535 21207 10303902 allow ip from any to any

---
 francis a. vidal [bitstop network services] | http://www.bnshosting.net
 streaming media + web hosting               | http://www.bitstop.ph
 v(02)330-2871,(02)330-2872; f(02)330-2873   | http://www.kuro.ph