<div dir="ltr">I thought that this was being caused by a firewall because I was seeing (requests go out, but blocked coming back) so I had the ports over 1024 opened :<div><br></div><div><font face="monospace">No. Time Source Destination Protocol Length Info<br> 156 16.493132 152.7.114.135 140.211.169.196 TCP 74 50994 → 443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2876033516 TSecr=0 WS=128<br> 157 16.493333 140.211.169.196 152.7.114.135 TCP 60 443 → 50994 [RST, ACK] Seq=1 Ack=1 Win=29200 Len=0<br> 158 16.493440 152.7.114.135 152.19.134.198 TCP 74 45744 → 443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2876033516 TSecr=0 WS=128<br> 159 16.493626 152.19.134.198 152.7.114.135 TCP 60 443 → 45744 [RST, ACK] Seq=1 Ack=1 Win=29200 Len=0<br></font></div><div><font face="monospace"><br></font></div><div><font face="monospace">but now it is still failing and I am also seeing this in access.log. It looks like connections are going out but not coming back :</font></div><div><font face="monospace"><br></font></div><div><font face="monospace">2019/08/19 13:17:38.576 kid1| 33,2| client_side.cc(817) swanSong: local=<a href="http://152.7.114.135:3128" target="_blank">152.7.114.135:3128</a> remote=<a href="http://10.50.54.22:57230" target="_blank">10.50.54.22:57230</a> flags=1<br>2019/08/19 13:17:52.050 kid1| 33,2| client_side.cc(817) swanSong: local=<a href="http://152.7.114.135:3128" target="_blank">152.7.114.135:3128</a> remote=<a href="http://10.50.54.21:48557" target="_blank">10.50.54.21:48557</a> flags=1<br>2019/08/19 13:17:53.608 kid1| 33,2| client_side.cc(817) swanSong: local=<a href="http://152.7.114.135:3128" target="_blank">152.7.114.135:3128</a> remote=<a href="http://10.50.54.22:57330" target="_blank">10.50.54.22:57330</a> flags=1<br>2019/08/19 13:18:07.053 kid1| 33,2| client_side.cc(817) swanSong: local=<a href="http://152.7.114.135:3128" target="_blank">152.7.114.135:3128</a> remote=<a href="http://10.50.54.21:48651" target="_blank">10.50.54.21:48651</a> flags=1<br>2019/08/19 13:18:08.725 kid1| 33,2| client_side.cc(817) swanSong: local=<a href="http://152.7.114.135:3128" target="_blank">152.7.114.135:3128</a> remote=<a href="http://10.50.54.22:57426" target="_blank">10.50.54.22:57426</a> flags=12</font><br></div><div><br></div><div>Do you see anything else relevant in here?</div><div><br></div><div>Thanks,</div><div><span style="font-family:monospace">Tom</span><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Aug 10, 2019 at 1:57 PM Alex Rousskov <<a href="mailto:rousskov@measurement-factory.com" target="_blank">rousskov@measurement-factory.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 8/9/19 4:32 PM, Tom Karches wrote:<br>
> Right now my debug is set to ALL,1 33,2. Is there a better set of<br>
> options to provide me more visibility of what might be wrong?<br>
<br>
In theory, yes: You can increase verbosity levels to see exactly what is<br>
going on. However, most people get lost in the debugging noise. FWIW, I<br>
do not recommend using cache.log above ALL,1 (the default) for triaging<br>
connectivity problems like yours by Squid newbies like you. Most likely,<br>
the connectivity problem is outside Squid and can be seen/reproduced<br>
outside Squid.<br>
<br>
I would use Wireshark, tcpdump, or a similar packet-level tool to figure<br>
out where Squid is trying to connect and from what address Squid is<br>
trying to connect. If you are not familiar with those basic tools, any<br>
capable local sysadmin can help you get started -- no Squid knowledge is<br>
needed!<br>
<br>
Alex.<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail-m_9065173782799168881gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><font size="1" face="arial, helvetica, sans-serif">Thomas Karches<br>NCSU OIT CSI - Systems Specialist</font></div><div><font size="1" face="arial, helvetica, sans-serif">M.E Student - Technology Education</font></div><div><font size="1" face="arial, helvetica, sans-serif">Hillsborough 319 / 919.515.5508</font></div><div dir="ltr"><br><br></div></div></div></div></div></div></div></div></div>