Monitor Squid Status

Bai Shen

Just did the cachemgr.cgi setup. Man, that's a lot of info. Is there anyplace that explains what each of those links mean?

Also, any suggestions for a good SNMP setup?

wagonza

Have a look at http://wiki.squid-cache.org/SquidFaq/CacheManager - which provides a lot of info on the statistics that are generated.

For a good SNMP graph tool check out www.cacti.net and if/once you have that setup download squid template from http://forums.cacti.net/about4142.html

it will create some nice pretty graphs.

Bai Shen

Cool. I'll take a look. Thanks.

dlawley

Sorry been a long week, must be missing something..

Configured as shown but get a Cache Manager Error.

connect: (60) Operation timed out

Not sure which user/password combo its looking for.. but I might not be getting that far that user/pw make a difference

ran the two CMDs as shown, set the following

External Cache-Managers set to 192.168.5.1
cachemgr.conf also set to 192.168.5.1

You made it sound easy…

wagonza

@dlawley:

Sorry been a long week, must be missing something..

Configured as shown but get a Cache Manager Error.

connect: (60) Operation timed out

Not sure which user/password combo its looking for.. but I might not be getting that far that user/pw make a difference

ran the two CMDs as shown, set the following

External Cache-Managers set to 192.168.5.1
cachemgr.conf also set to 192.168.5.1

You made it sound easy…

You should be getting a web page thats says "Cache Manager Interface" and below it a drop down list with the IP address 192.168.5.1 in it.
The username and password fields you can ignore and just click continue. It should still allow you in. The only difference is that some of the links will not be active for example 'Shut Down the Squid Process'. If you want this links set to active, then in General Settings->Custom options add:

'cachemgr_passwd none all'

and click save. You wont have to enter a password. To make it secure have a look at the cachemgr_passwd config option @ http://www.squid-cache.org/Doc/config/cachemgr_passwd/

dlawley

Thanks for the quick reply.

I was all around that option reading the squidfaq…

retraced my steps, and a reboot

Still getting Cache Manager timeout...

Running transparent maybe an issue?? I know it causes some limitations in other areas when you use it.

Maybe proxy filter service is also having an effect?

maybe I need to be hitting 127.0.0.1 instead. ?? guess its easy enough to try..

Do not edit manually !

http_port 192.168.5.1:800
http_port 127.0.0.1:80 transparent
icp_port 0

wagonza

@dlawley:

Thanks for the quick reply.

I was all around that option reading the squidfaq…

retraced my steps, and a reboot

Still getting Cache Manager timeout...

Running transparent maybe an issue?? I know it causes some limitations in other areas when you use it.

maybe I need to be hitting 127.0.0.1 instead. ?? guess its easy enough to try..

Do not edit manually !

http_port 192.168.5.1:800
http_port 127.0.0.1:80 transparent
icp_port 0

I see you have squid listening on the non default port of 800 - did you add 192.168.5.1:800 to the cachemgr.conf file? Not just 192.168.5.1 - otherwise cachemgr.cgi will try connect to 3128.

Shouldn't make a difference whether the proxy is in transparent mode or not.

dlawley

That did it!, thanks!!

dlawley

The proxy filter might impact your access to the cache mgr, if you have ip addresses blocked. Which I did on my production server.

But I'm all good now.

serangku

i always use cachemgr to monitoring squid …
ifen not understand much ... ;D
i keep this link on my email to help me remember how to it ...

http://forum.pfsense.org/index.php?topic=14609.0

Bai Shen

So I have the cachemgr page working, but one thing concerns me. On the Store Directory page, it says the following: Accepted object sizes: 0 - (unlimited) bytes

However, on the Cache Mgmt page, I have max object size set to 1024. So why the difference?

Pistolero

No workie for me :(

I get this:

Cache Manager menu for x.x.x.x:

GIF89a

Generated Mon, 25 Oct 2010 06:32:27 GMT, by cachemgr.cgi/2.7.STABLE9@r

Any help would be appreciated. Thanks!

wagonza

@Pistolero:

No workie for me :(

I get this:

Cache Manager menu for x.x.x.x:

GIF89a

Generated Mon, 25 Oct 2010 06:32:27 GMT, by cachemgr.cgi/2.7.STABLE9@r

Any help would be appreciated. Thanks!

I am not sure what that reference to GIF89a is? But you should see a page with:

Cache server with drop down list of your pfSense's IP address.
Input for a Manager name
Input for a Password

and finally a "Continue" button which will take you to the stats page. What do you see when you click on this button?

Pistolero

@wagonza:

@Pistolero:

No workie for me :(

I get this:

Cache Manager menu for x.x.x.x:

GIF89a

Generated Mon, 25 Oct 2010 06:32:27 GMT, by cachemgr.cgi/2.7.STABLE9@r

Any help would be appreciated. Thanks!

I am not sure what that reference to GIF89a is? But you should see a page with:

Cache server with drop down list of your pfSense's IP address.
Input for a Manager name
Input for a Password

and finally a "Continue" button which will take you to the stats page. What do you see when you click on this button?

I do see the drop-down list with the input fields. I get that weird screen after clicking continue. The weird page with the GIF89a I get only in Firefox. IE only displays

wagonza

Sounds like you dont have your cachemgr.conf file setup correctly and after clicking submit it is timing out.

udupagn

Hi pl tel me
i Installed pfsense

installed proxy server with mod security
'
squid package
squidguard package installed
tel me how to block unwanted or porn sites

pl reply
Ganesh

wagonza

Please dont hijack another thread but rather start a new one.

Have a look at http://doc.pfsense.org/index.php/SquidGuard_package for instructions.

Hugovsky

Did the cachemgr.cgi trick. Working great with squid in transparent mode. Thank you!

mikesamo

Mrtg work well too.

http://oss.oetiker.ch/mrtg/

![MRTG Index Page.png](/public/imported_attachments/1/MRTG Index Page.png)
![MRTG Index Page.png_thumb](/public/imported_attachments/1/MRTG Index Page.png_thumb)

Pistolero

I found what was breaking my cachemgr.cgi!

I use SquidGuard to filter ads and other inappropriate sites, redirecting them to an internal web server with a single transparent pixel. I also disallow IP addresses in the address field, to keep users too-smart-for-their-own-good from bypassing the filter by using an IP. If you configure the cachemgr to connect to the proxy via IP, it will be blocked. Solved by connecting to localhost or the host name of the firewall.