RE: [squid-users] Squid is crashing

Hi ,

For your information I have installed the same version on two machines one is working fine for staff but this machine which is serving students is creating problem of squid crash.
However In my further analysis I found following in cache.log file seems users deliberately doing some techniques to make the squid crash. Please advise.

2013/01/19 11:20:21| WARNING: HTTP header contains NULL characters {Accept: */*
2013/01/19 11:20:21| WARNING: HTTP header contains NULL characters {Accept: */*
2013/01/19 11:20:21| WARNING: HTTP header contains NULL characters {Accept: */*
2013/01/19 11:20:21| WARNING: HTTP header contains NULL characters {Accept: */*
2013/01/19 11:20:21| WARNING: HTTP header contains NULL characters {Accept: */*
2013/01/19 11:20:21| WARNING: HTTP header contains NULL characters {Accept: */*
2013/01/19 16:46:40| squidaio_queue_request: WARNING - Queue congestion
2013/01/19 17:24:06| WARNING: Closing client 192.168.105.214 connection due to lifetime timeout
2013/01/19 17:31:21| WARNING: Closing client 192.168.105.214 connection due to lifetime timeout
2013/01/19 17:35:03| WARNING: Closing client 192.168.105.214 connection due to lifetime timeout
2013/01/19 17:52:36| WARNING: Closing client 192.168.105.214 connection due to lifetime timeout
2013/01/19 21:59:50| WARNING: Forwarding loop detected for:
2013/01/19 21:59:50| WARNING: Forwarding loop detected for:
2013/01/19 23:06:39| squidaio_queue_request: WARNING - Disk I/O overloading
2013/01/19 23:33:12| squidaio_queue_request: WARNING - Disk I/O overloading
2013/01/20 00:12:16| squidaio_queue_request: WARNING - Disk I/O overloading
2013/01/20 00:21:17| squidaio_queue_request: WARNING - Disk I/O overloading
2013/01/20 00:24:17| squidaio_queue_request: WARNING - Disk I/O overloading
2013/01/20 00:28:48| squidaio_queue_request: WARNING - Disk I/O overloading
2013/01/20 00:29:18| squidaio_queue_request: WARNING - Disk I/O overloading
2013/01/20 00:29:48| squidaio_queue_request: WARNING - Disk I/O overloading

Regards,
Muhammad Farooq
________________________________________________________________________
 Save the environment. Please don't print this email unless you really need to.

-----Original Message-----
From: Eliezer Croitoru [mailto:eliezer_at_ngtech.co.il]
Sent: Monday, January 21, 2013 9:46 PM
To: squid-users_at_squid-cache.org
Subject: Re: [squid-users] Squid is crashing

On 1/21/2013 5:19 PM, Farooq Bhatti wrote:
> Thanks for the prompt response.
>
> Actually I am newbie to debugging I have never used any debugging tool before so no idea of the error I am getting any how I have googled for the last error and be able to install the glibc debuginfo packages but now the error is changed which is like below. So far I am not been able to run gdb as my Program exited with code 01. Please check below:
<SNIP>
>>> Le lundi 21 janvier 2013 à 15:32 +0500, Farooq Bhatti a écrit :
>>>> Hi all,
>>>>
>>>> My squid is crashing and I am getting the file of following core
>>>> dump, this is suddenly happening since last 2 weeks. Before it was working fine.
>>>>
>>>> [root_at_hostal-squid cache]# ls -lah /usr/local/squid/var/cache/
>>>> total 5.5G drwxr-xr-x. 2 squid squid 4.0K Jan 21 14:55 .
>>>> drwxr-xr-x. 5 squid squid 4.0K Aug 29 03:44 ..
>>>> -rw------- 1 squid squid 3.0G Jan 20 03:58 core.3878
>>>> -rw------- 1 squid squid 3.0G Jan 20 04:06 core.3904
>>>>
>>>> The version of squid with compiled option is as below:
>>>>
>>>> [root_at_hostal-squid cache]# squid -v Squid Cache: Version
>>>> LUSCA_HEAD-r14809 configure options:
>>>> '--enable-delay-pools' '--disable-arp-acl'
>>>> '--enable-linux-netfilter' '--enable-large-cache-files'
>>>> '--enable-cache-digests' '--enable-external-acl-helpers=ip_user'
>>>> '--disable-ident-lookups' '--enable-removal-policies=heap,lru'
>>>> '--disable-snmp' '--disable-ssl' '--enable-storeio=aufs,coss' '--with-aio'
>>>> '--with-maxfd=1048576' '--with-dl' '--with-pthreads' '--with-large-files'
>>>> '--disable-unlinkd' '--disable-htcp'
>>>>
<SNIP>

Hey there,

This version of squid in not squid but LUSCA which is a fork of squid 2.7.

If you need help about it try contact LUSCA developers.

Since I am not following lusca is dont know anything about their
revisions and maintenance but there are many new features in squid 3+ so
as always I suggest you to try to use squid latest stable.

Best regards,
Eliezer

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.2221 / Virus Database: 2639/5547 - Release Date: 01/21/13
Received on Wed Jan 23 2013 - 05:34:12 MST