Re: [squid-users] Crashed squid 2.5.STABLE11

From: <trainier@dont-contact.us>
Date: Tue, 11 Oct 2005 11:28:56 -0400

Does this file exist? -> /var/log/squid/store.log
Does the user running squid have permission to write to it?

Basically, do an ls -lah /var/log/squid
and paste the output into the reply email.

Tim Rainier
Information Services, Kalsec, INC
trainier@kalsec.com

"Lucia Di Occhi" <saint_lucy@hotmail.com> wrote on 10/11/2005 10:21:52 AM:

> Linux squid 2.6.12-1.1378_FC3smp #1 SMP Wed Sep 14 04:52:36 EDT 2005
i686
> i686 i386 GNU/Linux
>
> Squid Cache: Version 2.5.STABLE11
> configure options: --program-prefix= --prefix=/usr --exec-prefix=/usr
> --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc
--datadir=/usr/share
> --includedir=/usr/include --libdir=/usr/lib --libexecdir=/usr/libexec
> --localstatedir=/var --sharedstatedir=/usr/com --mandir=/usr/share/man
> --infodir=/usr/share/info --exec_prefix=/usr --bindir=/usr/sbin
> --libexecdir=/usr/lib/squid --localstatedir=/var --sysconfdir=/etc/squid

> --enable-poll --enable-removal-policies=heap,lru
> --enable-storeio=aufs,coss,diskd,null,ufs --enable-linux-netfilter
> --with-pthreads --enable-useragent-log --enable-referer-log
> --disable-dependency-tracking --enable-cachemgr-hostname=localhost
> --disable-ident-lookups --enable-truncate --enable-underscores
> --datadir=/usr/share
>
> Reading specs from /usr/lib/gcc/i386-redhat-linux/3.4.4/specs
> Configured with: ../configure --prefix=/usr --mandir=/usr/share/man
> --infodir=/usr/share/info --enable-shared --enable-threads=posix
> --disable-checking --with-system-zlib --enable-__cxa_atexit
> --disable-libunwind-exceptions --enable-java-awt=gtk
> --host=i386-redhat-linux
> Thread model: posix
> gcc version 3.4.4 20050721 (Red Hat 3.4.4-2)
>
> From cache.log
>
> 2005/10/11 02:31:33| WARNING: unparseable HTTP header field
> {403,14,URL,/vanityParser.cfm}
> 2005/10/11 02:31:33| WARNING: unparseable HTTP header field
> {404,*,URL,/test.htm}
> 2005/10/11 02:31:33| WARNING: unparseable HTTP header field
> {500,100,URL,/iisHelp/common/500-100.asp}
> 2005/10/11 02:31:33| ctx: exit level 0
> 2005/10/11 02:31:33| WARNING: unparseable HTTP header field
> {403,14,URL,/vanityParser.cfm}
> 2005/10/11 02:31:33| WARNING: unparseable HTTP header field
> {404,*,URL,/test.htm}
> 2005/10/11 02:31:33| WARNING: unparseable HTTP header field
> {500,100,URL,/iisHelp/common/500-100.asp}
> 2005/10/11 02:49:09| httpReadReply: Excess data from "GET
> http://hpdjjs.com/cgi-bin/jumpstation.py?query=overlandserver"
> 2005/10/11 03:04:53| httpReadReply: Excess data from "HEAD
> http://www.overture.com/"
> 2005/10/11 03:23:51| ctx: enter level 0:
> 'http://viewmorepics.myspace.com/index.cfm?
>
fuseaction=viewImage&friendID=28636111&imageID=251293587&Mytoken=8B0D8DCC-7FD4-4333-991911DE8DEF62D12839554968'
> 2005/10/11 03:23:51| WARNING: unparseable HTTP header field
> {403,14,URL,/vanityParser.cfm}
> 2005/10/11 03:23:51| WARNING: unparseable HTTP header field
> {404,*,URL,/test.htm}
> 2005/10/11 03:23:51| WARNING: unparseable HTTP header field
> {500,100,URL,/iisHelp/common/500-100.asp}
> 2005/10/11 03:23:51| ctx: exit level 0
> 2005/10/11 03:23:51| WARNING: unparseable HTTP header field
> {403,14,URL,/vanityParser.cfm}
> 2005/10/11 03:23:51| WARNING: unparseable HTTP header field
> {404,*,URL,/test.htm}
> 2005/10/11 03:23:51| WARNING: unparseable HTTP header field
> {500,100,URL,/iisHelp/common/500-100.asp}
> 2005/10/11 03:29:59| httpReadReply: Excess data from "HEAD
> http://www.overture.com/"
> 2005/10/11 04:02:53| storeDirWriteCleanLogs: Starting...
> 2005/10/11 04:02:53| WARNING: Closing open FD 12
> 2005/10/11 04:02:54| 65536 entries written so far.
> 2005/10/11 04:02:54| 131072 entries written so far.
> 2005/10/11 04:02:54| 196608 entries written so far.
> 2005/10/11 04:02:54| 262144 entries written so far.
> 2005/10/11 04:02:54| 327680 entries written so far.
> 2005/10/11 04:02:54| 393216 entries written so far.
> 2005/10/11 04:02:54| 458752 entries written so far.
> 2005/10/11 04:02:54| 524288 entries written so far.
> 2005/10/11 04:02:54| 589824 entries written so far.
> 2005/10/11 04:02:54| 655360 entries written so far.
> 2005/10/11 04:02:54| 720896 entries written so far.
> 2005/10/11 04:02:54| 786432 entries written so far.
> 2005/10/11 04:02:54| 851968 entries written so far.
> 2005/10/11 04:02:54| 917504 entries written so far.
> 2005/10/11 04:02:54| 983040 entries written so far.
> 2005/10/11 04:02:54| 1048576 entries written so far.
> 2005/10/11 04:02:54| 1114112 entries written so far.
> 2005/10/11 04:02:54| 1179648 entries written so far.
> 2005/10/11 04:02:54| 1245184 entries written so far.
> 2005/10/11 04:02:54| 1310720 entries written so far.
> 2005/10/11 04:02:55| 1376256 entries written so far.
> 2005/10/11 04:02:55| 1441792 entries written so far.
> 2005/10/11 04:02:55| 1507328 entries written so far.
> 2005/10/11 04:02:55| 1572864 entries written so far.
> 2005/10/11 04:02:55| 1638400 entries written so far.
> 2005/10/11 04:02:55| 1703936 entries written so far.
> 2005/10/11 04:02:55| 1769472 entries written so far.
> 2005/10/11 04:02:55| 1835008 entries written so far.
> 2005/10/11 04:02:55| 1900544 entries written so far.
> 2005/10/11 04:02:55| 1966080 entries written so far.
> 2005/10/11 04:02:55| 2031616 entries written so far.
> 2005/10/11 04:02:55| 2097152 entries written so far.
> 2005/10/11 04:02:55| 2162688 entries written so far.
> 2005/10/11 04:02:56| 2228224 entries written so far.
> 2005/10/11 04:02:56| 2293760 entries written so far.
> 2005/10/11 04:02:56| 2359296 entries written so far.
> 2005/10/11 04:02:56| 2424832 entries written so far.
> 2005/10/11 04:02:56| 2490368 entries written so far.
> 2005/10/11 04:02:56| 2555904 entries written so far.
> 2005/10/11 04:02:56| 2621440 entries written so far.
> 2005/10/11 04:02:56| 2686976 entries written so far.
> 2005/10/11 04:02:56| 2752512 entries written so far.
> 2005/10/11 04:02:57| 2818048 entries written so far.
> 2005/10/11 04:02:57| 2883584 entries written so far.
> 2005/10/11 04:03:00| Finished. Wrote 2885180 entries.
> 2005/10/11 04:03:00| Took 6.3 seconds (459816.8 entries/sec).
> FATAL: logfileWrite: /var/log/squid/store.log: (0) Success
>
> Squid Cache (Version 2.5.STABLE11): Terminated abnormally.
> CPU Usage: 52558.798 seconds = 17715.523 user + 34843.275 sys
> Maximum Resident Size: 0 KB
> Page faults with physical i/o: 0
> Memory usage for squid via mallinfo():
> total space in arena: 1616044 KB
> Ordinary blocks: 1589468 KB 289245 blks
> Small blocks: 0 KB 0 blks
> Holding blocks: 3284 KB 7 blks
> Free Small blocks: 0 KB
> Free Ordinary blocks: 26575 KB
> Total in use: 1592752 KB 99%
> Total free: 26575 KB 2%
> 2005/10/11 04:03:07| Starting Squid Cache version 2.5.STABLE11 for
> i686-pc-linux-gnu...
> ...
> ...
> ...
>
> squid[/tmp]tail -10000 access.log.1 | grep overture
> 1129017007.008 455 127.0.0.1 TCP_MISS/200 13106 GET
> http://www.thesearchster.com/cgi-bin/overture/allsize.cgi? -
> DIRECT/209.225.11.243 img/png
> 1129017563.877 222 127.0.0.1 TCP_MISS/200 3633 GET
> http://cmhtml.vendare.overture.com/d/search/p/vendare/js/ctxt/? -
> DIRECT/64.209.232.207 application/x-javascript
> 1129017763.617 384 127.0.0.1 TCP_MISS/200 5845 GET
> http://ypn-js.overture.com/partner/js/ypn.js - DIRECT/63.163.102.61
> application/x-javascript
> 1129017764.139 441 127.0.0.1 TCP_MISS/200 4021 GET
> http://ypn-js.overture.com/d/search/p/ypn/jsads/? - DIRECT/63.163.102.61

> text/html
> 1129017764.548 595 127.0.0.1 TCP_MISS/200 6987 GET
> http://ypn-js.overture.com/d/search/p/ypn/jsads/? - DIRECT/63.163.102.61

> text/html
>
>
> I hope this helps.
>
> _________________________________________________________________
> Express yourself instantly with MSN Messenger! Download today - it's
FREE!
> http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
>
Received on Tue Oct 11 2005 - 09:32:42 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Nov 01 2005 - 12:00:04 MST