[squid-users] NTLM Authenticator Statistics 3.3.5

From: Kris Glynn <kris.glynn_at_virginaustralia.com>
Date: Mon, 30 Sep 2013 04:07:03 +0000

Hi,

I've noticed after a while the number of /usr/bin/ntlm_auth processes in "shutting down state" tends to increase and never actually shutdown/decrease.

It is configured like so..

auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 60 startup=15 idle=10
auth_param ntlm keep_alive off

 I've found an occurrence where a squid -k rotate was performed (performed daily via cron) and helperOpenServers tried to start processes and logged the below. When I logged into the squid server many many old ntlm_auth processes were running (over 140+ in shutting down state)

Is it normal for a squid -k rotate to spawn helpers? Should I be scheduling a squid restart to occur every x days and perhaps killall -9 ntlm_auth at the same time or does anyone have any suggestions as to why /usr/bin/ntlm_auth processes with Flags "RS" increase over time when not restarting squid?

2013/09/24 00:00:23 kid1| storeDirWriteCleanLogs: Starting...
2013/09/24 00:00:28 kid1| 65536 entries written so far.
2013/09/24 00:00:35 kid1| 131072 entries written so far.
2013/09/24 00:00:40 kid1| 196608 entries written so far.
2013/09/24 00:00:45 kid1| 262144 entries written so far.
2013/09/24 00:00:48 kid1| 327680 entries written so far.
2013/09/24 00:00:51 kid1| 393216 entries written so far.
2013/09/24 00:00:55 kid1| 458752 entries written so far.
2013/09/24 00:00:59 kid1| 524288 entries written so far.
2013/09/24 00:01:02 kid1| 589824 entries written so far.
2013/09/24 00:01:05 kid1| 655360 entries written so far.
2013/09/24 00:01:07 kid1| 720896 entries written so far.
2013/09/24 00:01:08 kid1| Finished. Wrote 759594 entries.
2013/09/24 00:01:08 kid1| Took 44.19 seconds (17189.28 entries/sec).
2013/09/24 00:01:08 kid1| logfileRotate: stdio://var/log/squid/access.log
2013/09/24 00:01:08 kid1| Rotate log file stdio://var/log/squid/access.log
2013/09/24 00:01:08 kid1| helperOpenServers: Starting 10/60 'ntlm_auth' processes
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| helperOpenServers: Starting 1/10 'ntlm_auth' processes
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory
2013/09/24 00:01:08 kid1| WARNING: Cannot run '/usr/bin/ntlm_auth' process.
2013/09/24 00:01:08 kid1| helperOpenServers: Starting 1/50 'ext_wbinfo_group_acl' processes
2013/09/24 00:01:08 kid1| ipcCreate: fork: (12) Cannot allocate memory

mgr:ntlmauthenticator

NTLM Authenticator Statistics:
program: /usr/bin/ntlm_auth
number active: 40 of 60 (77 shutting down)
requests sent: 9021339
replies received: 9021339
queue length: 0
avg service time: 0 msec

Below is output from mgr:info at the same time the above mgr:ntlmauthenticator was run..

Squid Object Cache: Version 3.3.5
Start Time: Wed, 18 Sep 2013 04:48:06 GMT
Current Time: Mon, 30 Sep 2013 03:50:02 GMT
Connection information for squid:
        Number of clients accessing cache: 3540
        Number of HTTP requests received: 47586765
        Number of ICP messages received: 0
        Number of ICP messages sent: 0
        Number of queued ICP replies: 0
        Number of HTCP messages received: 0
        Number of HTCP messages sent: 0
        Request failure ratio: 0.00
        Average HTTP requests per minute since start: 2763.2
        Average ICP messages per minute since start: 0.0
        Select loop called: 1816815750 times, 0.569 ms avg
Cache information for squid:
        Hits as % of all requests: 5min: 13.2%, 60min: 17.0%
        Hits as % of bytes sent: 5min: 5.2%, 60min: 10.5%
        Memory hits as % of hit requests: 5min: 19.3%, 60min: 21.6%
        Disk hits as % of hit requests: 5min: 15.3%, 60min: 12.4%
        Storage Swap size: 18430644 KB
        Storage Swap capacity: 90.0% used, 10.0% free
        Storage Mem size: 2028096 KB
        Storage Mem capacity: 99.0% used, 1.0% free
        Mean Object Size: 24.57 KB
        Requests given to unlinkd: 0
Median Service Times (seconds) 5 min 60 min:
        HTTP Requests (All): 0.01235 0.00919
        Cache Misses: 0.08265 0.14252
        Cache Hits: 0.00179 0.00091
        Near Hits: 0.01745 0.01469
        Not-Modified Replies: 0.00000 0.00000
        DNS Lookups: 0.00464 0.00464
        ICP Queries: 0.00000 0.00000
Resource usage for squid:
        UP Time: 1033315.041 seconds
        CPU Time: 78172.769 seconds
        CPU Usage: 7.57%
        CPU Usage, 5 minute avg: 19.42%
        CPU Usage, 60 minute avg: 18.82%
        Process Data Segment Size via sbrk(): 2977284 KB
        Maximum Resident Size: 11641712 KB
        Page faults with physical i/o: 28016
Memory usage for squid via mallinfo():
        Total space in arena: -1216888 KB
        Ordinary blocks: -1249480 KB 117072 blks
        Small blocks: 0 KB 0 blks
        Holding blocks: 14172 KB 11 blks
        Free Small blocks: 0 KB
        Free Ordinary blocks: 32592 KB
        Total in use: 32592 KB -3%
        Total free: 32592 KB -3%
        Total size: -1202716 KB
Memory accounted for:
        Total accounted: -1548505 KB 129%
        memPool accounted: 2645799 KB -220%
        memPool unaccounted: -3848515 KB -0%
        memPoolAlloc calls: 9094446713
        memPoolFree calls: 9173333887
File descriptor usage for squid:
        Maximum number of file descriptors: 16384
        Largest file desc currently in use: 3031
        Number of file desc currently in use: 2602
        Files queued for open: 0
        Available number of file descriptors: 13782
        Reserved number of file descriptors: 100
        Store Disk files open: 0
Internal Data Structures:
        751840 StoreEntries
        133109 StoreEntries with MemObjects
        133085 Hot Object Cache Items
        749978 on-disk objects

The content of this e-mail, including any attachments, is a confidential communication between Virgin Australia Airlines Pty Ltd (Virgin Australia) or its related entities (or the sender if this email is a private communication) and the intended addressee and is for the sole use of that intended addressee. If you are not the intended addressee, any use, interference with, disclosure or copying of this material is unauthorized and prohibited. If you have received this e-mail in error please contact the sender immediately and then delete the message and any attachment(s). There is no warranty that this email is error, virus or defect free. This email is also subject to copyright. No part of it should be reproduced, adapted or communicated without the written consent of the copyright owner. If this is a private communication it does not represent the views of Virgin Australia or its related entities. Please be aware that the contents of any emails sent to or from Virgin Australia or its related entities may be periodically monitored and reviewed. Virgin Australia and its related entities respect your privacy. Our privacy policy can be accessed from our website: www.virginaustralia.com
Received on Mon Sep 30 2013 - 04:12:43 MDT

This archive was generated by hypermail 2.2.0 : Mon Sep 30 2013 - 12:00:04 MDT