Squid (or lightsqid, but Presumably squid) logs losing data on the day?
-
pfsense 2.0.2 release, amd64
squid 2.7.9 pkg v.4.3.3
lightsquid 1.8.2 pkg v.2.32
Looking over the course of the day, what lightsquid reports will suddenly shrink, as though vast blocks of transactions it reported earlier have been forgotten. Squid is set to rotate logs, but at 14 days and it's been up for only 5, and it's the current day that loses data. The squid partition (I made /, /tmp, /var and /squid as separate partitions, and changed the log and cache locations for squid to /squid rather than /var/squid) is running below 2%, so it's not running out of space.
So today, for instance, we had 28 users and 2.5 gig or so reported in the afternoon, and now the total reported for the day is 15 users and 1.3 gig. I've caught the same thing happening at least one other day, and I'd guess it happened at least 3 of the 5. Makes the reported data somewhat suspect, to say the least.
I tried uninstalling lightsquid and installing sargs, but could not get anything useful out of sargs, and after reading non-helpful sargs help that didn't get me to anything useful, went back to lightsquid as at least providing some data, albeit not stunningly reliable data - but it may not be lightsquid's fault - could be squid is somehow losing the data lightsquid interprets.
Not a huge deal, but not good for thinking that what is reported reflects reality.
-
My LightSquid stopped logging Dec 17th and hasn't logged a thing since - no changes to the system. I wonder if it's related? I'm going to watch this thread!