<div dir="ltr"><div>Small clarification</div><div><br><div>If the normal behavior of the proxy server described above is correct, then maybe there are other methods of gathering information on traffic in online mode?</div></div><div><br>Perhaps there are other solutions besides log parsing?<br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2018-06-06 12:21 GMT+03:00 Tiraen <span dir="ltr"><<a href="mailto:tiraen@gmail.com" target="_blank">tiraen@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">><span style="text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><span class=""><span style="font-size:12.8px">If you are using SSL-Bump features, please consider Squid-4 instead</span><br><br></span><span style="font-size:12.8px">It is not used at all.Squid does not work with ssl. Frontend only<br></span><br><br>Concerning incorrectly specified options at build<br><br>Here on this squid happens the same thing:<br><br><div><i> squid3 -v</i></div><div><i>Squid Cache: Version 3.4.8</i></div><div><i> linux</i></div><div><i>configure options: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/<wbr>include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/<wbr>info' '--sysconfdir=/etc' '--localstatedir=/var' '--libexecdir=${prefix}/lib/<wbr>squid3' '--srcdir=.' '--disable-maintainer-mode' '--disable-dependency-<wbr>tracking' '--disable-silent-rules' '--datadir=/usr/share/squid3' '--sysconfdir=/etc/squid3' '--mandir=/usr/share/man' '--enable-inline' '--disable-arch-native' '--enable-async-io=8' '--enable-storeio=ufs,aufs,<wbr>diskd,rock' '--enable-removal-policies=<wbr>lru,heap' '--enable-delay-pools' '--enable-cache-digests' '--enable-icap-client' '--enable-follow-x-forwarded-<wbr>for' '--enable-auth-basic=DB,fake,<wbr>getpwnam,LDAP,MSNT,MSNT-multi-<wbr>domain,NCSA,NIS,PAM,POP3,<wbr>RADIUS,SASL,SMB' '--enable-auth-digest=file,<wbr>LDAP' '--enable-auth-negotiate=<wbr>kerberos,wrapper' '--enable-auth-ntlm=fake,smb_<wbr>lm' '--enable-external-acl-<wbr>helpers=file_userip,kerberos_<wbr>ldap_group,LDAP_group,session,<wbr>SQL_session,unix_group,wbinfo_<wbr>group' '--enable-url-rewrite-helpers=<wbr>fake' '--enable-eui' '--enable-esi' '--enable-icmp' '--enable-zph-qos' '--enable-ecap' '--disable-translation' '--with-swapdir=/var/spool/<wbr>squid3' '--with-logdir=/var/log/<wbr>squid3' '--with-pidfile=/var/run/<wbr>squid3.pid' '--with-filedescriptors=65536' '--with-large-files' '--with-default-user=proxy' '--enable-build-info= linux' '--enable-linux-netfilter' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wall' 'LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-D_FORTIFY_SOURCE=2' 'CXXFLAGS=-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security'</i><br><br><br><i>no out data</i><br><br><br><div><i>Connection: 0x7f18ee951c58</i></div><div><i><span style="white-space:pre-wrap"> </span>FD 15, read 10070, wrote 19018</i></div><span class=""><div><i><span style="white-space:pre-wrap"> </span>FD desc: Reading next request</i></div></span><div><i><span style="white-space:pre-wrap"> </span>in: buf 0x7f18ee952070, offset 0, size 4096</i></div><div><i><span style="white-space:pre-wrap"> </span>remote: <a href="http://127.0.0.1:52827" target="_blank">127.0.0.1:52827</a></i></div><div><i><span style="white-space:pre-wrap"> </span>local: <a href="http://127.0.0.1:8080" target="_blank">127.0.0.1:8080</a></i></div><div><i><span style="white-space:pre-wrap"> </span>nrequests: 38</i></div><div><i>uri <a href="http://icanhazip.com/" target="_blank">http://icanhazip.com/</a></i></div><div><i>logType TCP_MISS</i></div><div><i>out.offset 0, out.size 0</i></div><div><i>req_sz 265</i></div><div><i>entry 0x7f18ee3bc740/<wbr>F9929050DEE6E67D2DF51EDCBC0CB8<wbr>0F</i></div><div><i>start 1528276856.390709 (2.640371 seconds ago)</i></div><div><i>username</i></div><div><i>delay_pool 0</i></div><div><i><br></i></div><div><i>Connection: 0x7f18ee874168</i></div><div><i><span style="white-space:pre-wrap"> </span>FD 13, read 10070, wrote 19018</i></div><span class=""><div><i><span style="white-space:pre-wrap"> </span>FD desc: Reading next request</i></div></span><div><i><span style="white-space:pre-wrap"> </span>in: buf 0x7f18ee86bb60, offset 0, size 4096</i></div><div><i><span style="white-space:pre-wrap"> </span>remote: <a href="http://127.0.0.1:52825" target="_blank">127.0.0.1:52825</a></i></div><div><i><span style="white-space:pre-wrap"> </span>local: <a href="http://127.0.0.1:8080" target="_blank">127.0.0.1:8080</a></i></div><div><i><span style="white-space:pre-wrap"> </span>nrequests: 38</i></div><div><i>uri <a href="http://icanhazip.com/" target="_blank">http://icanhazip.com/</a></i></div><div><i>logType TCP_MISS</i></div><div><i>out.offset 0, out.size 0</i></div><div><i>req_sz 265</i></div><div><i>entry 0x7f18ee87fde0/<wbr>560E3AC236A180ECB815B5B41527D2<wbr>BA</i></div><div><i>start 1528276856.368609 (2.662471 seconds ago)</i></div><div><i>username</i></div><div><i>delay_pool 0<br><br></i></div></div><br><br></span></div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">2018-06-06 7:51 GMT+03:00 Amos Jeffries <span dir="ltr"><<a href="mailto:squid3@treenet.co.nz" target="_blank">squid3@treenet.co.nz</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 06/06/18 07:12, Tiraen wrote:<br>
> /The second transaction has not yet reached that state despite 81017sec<br>
> having past.<br>
> /<br>
<span>> Thank you for clarification.<br>
> <br>
> About squid version<br>
> <br>
</span>> /squid -v/<br>
> /Squid Cache: Version 3.5.27/<br>
...<br>
<br>
If you are using SSL-Bump features, please consider Squid-4 instead. The<br>
strangely long timeouts on transactions is likely to be a side effect of<br>
on old behaviour in Squid-3 seen with transactions that were bumped.<br>
<br>
<br>
> '--enable-ssl'<br>
> '--with-open-ssl=/etc/ssl/open<wbr>ssl.cnf'<br>
<br>
Two problems with the above:<br>
<br>
1) the option name is "--with-openssl".<br>
<br>
2) that option takes the directory PATH where the OpenSSL development<br>
files were installed. If using the OS provided library package *omit*<br>
the =PATH portion.<br>
<span class="m_8405671129904261836HOEnZb"><font color="#888888"><br>
<br>
Amos<br>
</font></span></blockquote></div><br><br clear="all"><div><br></div></div></div><span class="">-- <br><div class="m_8405671129904261836gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><span lang="en"><span>With best</span> <span>regards,</span><br><br><span>Vyacheslav</span> <span>Yakushev</span><span>,</span><br><br><span>Unix</span> <span>system administrator<br></span><span></span><span></span><br><a href="https://t.me/kelewind" target="_blank">https://t.me/kelewind</a><br><span></span></span><span lang="en"><span></span></span></div></div></div></div></div></div></div>
</span></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><span lang="en"><span>With best</span> <span>regards,</span><br><br><span>Vyacheslav</span> <span>Yakushev</span><span>,</span><br><br><span>Unix</span> <span>system administrator<br></span><span></span><span></span><br><a href="https://t.me/kelewind" target="_blank">https://t.me/kelewind</a><br><span></span></span><span lang="en"><span></span></span></div></div></div></div></div></div></div>
</div>