Re: Fwd: [squid-users] Squid, SNMP and MRTG

From: Indunil Jayasooriya <[email protected]>
Date: Fri, 4 Jan 2008 15:03:48 +0530

> > HERE'S MY squid.conf
> >
> > acl mynet src 192.1.54.0/24 192.168.9.0/24
> > http_access allow mynet
> >
> > snmp_port 3401
> > acl snmppublic snmp_community public
> > snmp_access allow snmppublic localhost
> > snmp_access deny all
> > snmp_incoming_address 0.0.0.0
> > snmp_outgoing_address 0.0.0.0
> >
> > What am I missing?
> >
> > HOPE to hear from you.
> >
>
> Check your squid log, are you getting access denied errors to the
> cache-manager? I had the exact same problem that you are mentioning and
> once I allowed access to the cache-manager I started showing traffic on
> my graphs.

these are my squid logs.

pls see below. this is the out put of tail -f /var/log/squid/access.log

no access denied errors to be found.

[root@mail ~]# tail -f /var/log/squid/access.log
1199438808.276 50 192.1.54.62 TCP_REFRESH_MISS/200 13247 GET
http://192.1.54.62/squid/objects.day.png - DIRECT/192.1.54.62
image/png
1199438808.276 61 192.1.54.62 TCP_REFRESH_MISS/200 12579 GET
http://192.1.54.62/squid/connections.day.png - DIRECT/192.1.54.62
image/png
1199438808.291 25 192.1.54.62 TCP_REFRESH_MISS/200 12443 GET
http://192.1.54.62/squid/hitratio.day.png - DIRECT/192.1.54.62
image/png
1199438808.299 22 192.1.54.62 TCP_REFRESH_MISS/200 12264 GET
http://192.1.54.62/squid/cpu.day.png - DIRECT/192.1.54.62 image/png
1199438808.319 28 192.1.54.62 TCP_REFRESH_MISS/200 12983 GET
http://192.1.54.62/squid/diskd.day.png - DIRECT/192.1.54.62 image/png
1199438808.321 44 192.1.54.62 TCP_REFRESH_MISS/200 12489 GET
http://192.1.54.62/squid/pagefaults.day.png - DIRECT/192.1.54.62
image/png
1199438808.330 10 192.1.54.62 TCP_REFRESH_MISS/200 13770 GET
http://192.1.54.62/squid/select.day.png - DIRECT/192.1.54.62 image/png
1199438808.330 31 192.1.54.62 TCP_REFRESH_MISS/200 13757 GET
http://192.1.54.62/squid/memory.day.png - DIRECT/192.1.54.62 image/png
1199438808.987 7738 192.1.54.62 TCP_MISS/200 1176 POST
http://mail.google.com/mail/? - DIRECT/209.85.201.83 text/javascript
1199438810.352 1365 192.1.54.62 TCP_MISS/200 10918 POST
http://mail.google.com/mail/? - DIRECT/209.85.201.18 text/javascript
1199438835.157 1175 192.1.54.62 TCP_MISS/200 301 POST
http://mail.google.com/mail/channel/bind? - DIRECT/209.85.201.17
text/html
1199438838.910 3753 192.1.54.62 TCP_MISS/200 301 POST
http://mail.google.com/mail/channel/bind? - DIRECT/209.85.201.83
text/html
1199438841.822 6605 192.1.54.62 TCP_MISS/204 212 GET
http://www.google.lk/url? - DIRECT/64.233.189.104 text/html
1199438842.268 6697 192.1.54.62 TCP_MISS/200 5539 GET
http://www.mail-archive.com/squid-users@squid-cache.org/maillist.html
- DIRECT/72.52.77.3 text/html
1199438842.766 821 192.1.54.62 TCP_MISS/200 5385 GET
http://www.mail-archive.com/images/cron-no-logo.gif -
DIRECT/72.52.77.3 image/gif
1199438842.795 711 192.1.54.62 TCP_MISS/200 534 GET
http://www.mail-archive.com/images/cron-top2.gif - DIRECT/72.52.77.3
image/gif
1199438842.801 711 192.1.54.62 TCP_MISS/200 1542 GET
http://www.mail-archive.com/images/cron-left.jpg - DIRECT/72.52.77.3
image/jpeg

This is the OUTPUT of tail -f /var/log/squid/cache.log

there Something is going on.

[root@mail ~]# tail -f /var/log/squid/cache.log
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting '5min'
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting 'diskd'
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting 'store_io'
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting 'storedir'
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting 'info'
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting 'counters'
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting '5min'
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting 'diskd'
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting 'store_io'
2008/01/04 14:55:01| CACHEMGR: <unknown>@127.0.0.1 requesting 'storedir'

it syas unknown. is it related to the below rule of squid.conf where I
have given public.

acl snmppublic snmp_community public

These rules are availbles in squid.conf file.

# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager

Where have I gone wrong?

Hope to hear from you.

-- 
Thank you
Indunil Jayasooriya
Received on Fri Jan 04 2008 - 02:33:52 MST

This archive was generated by hypermail pre-2.1.9 : Fri Feb 01 2008 - 12:00:04 MST