Newbie Question: Getting only TCP_MISS(200, 206, 304, 412, etc) in Squid

t895

I've been looking all over the pfsense forums and Google and I have not been able to figure out why I have only been getting TCP_MISS all over my squid log. I have seen TCP_MEM_HIT, but no hits on any downloads that I've tried such as chrome installers, discord installer, steam game downloads.

1483111064.142     40 192.168.1.146 TCP_MISS/200 199 GET http://gspe19.ls.apple.com/tile.vf? - ORIGINAL_DST/23.67.250.90 -
1483111064.210     48 192.168.1.146 TCP_MISS/200 13222 GET http://gspe19.ls.apple.com/tile.vf? - ORIGINAL_DST/23.67.250.90 application/octet-stream
1483111064.210     45 192.168.1.146 TCP_MISS/200 199 GET http://gspe19.ls.apple.com/tile.vf? - ORIGINAL_DST/23.67.250.90 -
1483111064.212     44 192.168.1.146 TCP_MISS/200 547 GET http://gspe19.ls.apple.com/tile.vf? - ORIGINAL_DST/23.67.250.90 application/octet-stream
1483111064.218     38 192.168.1.146 TCP_MISS/200 199 GET http://gspe19.ls.apple.com/tile.vf? - ORIGINAL_DST/23.67.250.90 -
1483111065.874     30 192.168.1.146 TCP_MEM_HIT/200 348 GET http://static.ess.apple.com/connectivity.txt - HIER_NONE/- text/plain
1483111390.758    114 192.168.1.112 TCP_MISS/200 1693 GET http://cdn.content.prod.cms.msn.com/singletile/summary/alias/experiencebyname/today? - ORIGINAL_DST/23.206.225.186 text/xml
1483111662.022    107 192.168.1.146 TCP_REFRESH_UNMODIFIED/200 9382 GET http://init-p01md.apple.com/bag? - ORIGINAL_DST/184.26.44.105 application/x-apple-plist
1483111909.917     97 192.168.1.5 TCP_MISS/200 6948 GET http://scontent-ort2-1.cdninstagram.com/t51.2885-19/s150x150/15624671_1639638689671708_8593808712630534144_a.jpg - ORIGINAL_DST/157.240.2.52 image/jpeg
1483112798.501    106 192.168.1.5 TCP_MISS/200 9897 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/s240x240/e35/15624544_195676184230461_3970506813417193472_n.jpg - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112798.515    121 192.168.1.5 TCP_MISS/200 11693 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/s240x240/e35/14561801_245696089184909_4202348714263576576_n.jpg - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112798.527    131 192.168.1.5 TCP_MISS/200 9414 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/s240x240/e35/15624219_564255847113417_8593763327711117312_n.jpg - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112798.541    145 192.168.1.5 TCP_MISS/200 11418 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/s240x240/e35/15535543_1871631253055930_690614815458066432_n.jpg - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112798.651     61 192.168.1.5 TCP_MISS/200 12597 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/s240x240/e35/15623792_1287273107982262_4585786884596170752_n.jpg - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112799.573    174 192.168.1.5 TCP_MISS/200 40038 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/s1080x1080/e15/fr/15338551_219721485103527_6853286152368029696_n.jpg - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112799.728    343 192.168.1.5 TCP_MISS/200 69563 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/e35/15802934_624676017717640_500328166309494784_n.jpg? - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112799.746    345 192.168.1.5 TCP_MISS/200 70870 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/e35/15802548_1479942672046467_6739204210304221184_n.jpg? - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112799.827    443 192.168.1.5 TCP_MISS/200 88022 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/e35/15624284_243208359447008_6948478016515211264_n.jpg - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112799.862    182 192.168.1.5 TCP_MISS/200 55789 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/e35/14561755_1218481648242143_8381528493736853504_n.jpg - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112800.313    468 192.168.1.5 TCP_MISS/200 113445 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/e35/15625565_1757031474616103_1713625847262347264_n.jpg? - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112800.512    519 192.168.1.5 TCP_MISS/200 70674 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/e35/15802269_1823863161195486_4882911579672150016_n.jpg? - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112800.544    628 192.168.1.5 TCP_MISS/200 96270 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/e35/15803253_1461197720558478_7617377185266925568_n.jpg? - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112800.546    584 192.168.1.5 TCP_MISS/200 76376 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-15/e35/15624563_640176622828472_1075919535627829248_n.jpg? - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112800.958   1399 192.168.1.5 TCP_MISS/206 524694 GET http://scontent-ord1-1.cdninstagram.com/t50.2886-16/15630118_731619610322034_7417193166236811264_n.mp4 - ORIGINAL_DST/31.13.74.52 video/mp4
1483112814.928     52 192.168.1.5 TCP_MISS/200 5264 GET http://scontent-ord1-1.cdninstagram.com/t51.2885-19/s150x150/14360206_611306332383903_1249031909_a.jpg - ORIGINAL_DST/31.13.74.52 image/jpeg
1483112836.362    115 192.168.1.5 TCP_MISS/204 207 GET http://connectivitycheck.gstatic.com/generate_204 - ORIGINAL_DST/216.58.217.110 -
1483112837.033    208 192.168.1.5 TCP_MISS/204 207 GET http://clients3.google.com/generate_204 - ORIGINAL_DST/216.58.217.110 -
1483112837.091     38 192.168.1.5 TCP_MISS/204 207 GET http://clients3.google.com/generate_204 - ORIGINAL_DST/216.58.217.110 -
1483112847.543    183 192.168.1.112 TCP_MISS/302 666 GET http://ui.skype.com/ui/0/7.24.0.104/en/upgrade - ORIGINAL_DST/157.56.109.8 text/html
1483112847.968    179 192.168.1.112 TCP_MISS/302 543 GET http://get.skype.com/go/getskype-upgrade-new? - ORIGINAL_DST/40.80.146.203 text/html
1483112848.238     79 192.168.1.112 TCP_MISS/412 311 GET http://download.skype.com/f770ec8c5f481786ef5f9463271b5023/partner/64/SkypeSetupFull.exe - ORIGINAL_DST/23.206.224.205 text/html
1483112848.350     84 192.168.1.112 TCP_MISS/302 666 GET http://ui.skype.com/ui/0/7.24.0.104/en/upgrade - ORIGINAL_DST/157.56.109.8 text/html
1483112848.395     41 192.168.1.112 TCP_MISS/302 532 GET http://get.skype.com/go/getskype-upgrade-new? - ORIGINAL_DST/40.80.146.203 text/html
1483112849.426   1028 192.168.1.112 TCP_MISS/206 807474 GET http://download.skype.com/f770ec8c5f481786ef5f9463271b5023/SkypeSetupFull.exe - ORIGINAL_DST/23.206.224.205 application/x-msdownload
1483112849.547     75 192.168.1.112 TCP_MISS/302 666 GET http://ui.skype.com/ui/0/7.24.0.104/en/upgrade - ORIGINAL_DST/157.56.109.8 text/html
1483112849.592     41 192.168.1.112 TCP_MISS/302 543 GET http://get.skype.com/go/getskype-upgrade-new? - ORIGINAL_DST/40.80.146.203 text/html
1483112849.650     51 192.168.1.112 TCP_MISS/412 311 GET http://download.skype.com/f770ec8c5f481786ef5f9463271b5023/partner/80/SkypeSetupFull.exe - ORIGINAL_DST/23.206.224.205 text/html
1483112849.753     76 192.168.1.112 TCP_MISS/302 666 GET http://ui.skype.com/ui/0/7.24.0.104/en/upgrade - ORIGINAL_DST/157.56.109.8 text/html
1483112849.799     43 192.168.1.112 TCP_MISS/302 543 GET http://get.skype.com/go/getskype-upgrade-new? - ORIGINAL_DST/40.80.146.203 text/html
1483112849.839     35 192.168.1.112 TCP_MISS_ABORTED/206 2980 GET http://download.skype.com/f770ec8c5f481786ef5f9463271b5023/partner/80/SkypeSetupFull.exe - ORIGINAL_DST/23.206.224.205 application/x-msdownload
1483112850.081    230 192.168.1.112 TCP_MISS/302 666 GET http://ui.skype.com/ui/0/7.24.0.104/en/upgrade - ORIGINAL_DST/157.56.109.8 text/html
1483112850.127     41 192.168.1.112 TCP_MISS/302 543 GET http://get.skype.com/go/getskype-upgrade-new? - ORIGINAL_DST/40.80.146.203 text/html
1483112850.208     58 192.168.1.112 TCP_MISS_ABORTED/206 2980 GET http://download.skype.com/f770ec8c5f481786ef5f9463271b5023/partner/64/SkypeSetupFull.exe - ORIGINAL_DST/23.206.224.205 application/x-msdownload
1483112850.316     76 192.168.1.112 TCP_MISS/302 666 GET http://ui.skype.com/ui/0/7.24.0.104/en/upgrade - ORIGINAL_DST/157.56.109.8 text/html
1483112850.360     41 192.168.1.112 TCP_MISS/302 543 GET http://get.skype.com/go/getskype-upgrade-new? - ORIGINAL_DST/40.80.146.203 text/html
1483112851.443   1043 192.168.1.112 TCP_MISS/206 803631 GET http://download.skype.com/f770ec8c5f481786ef5f9463271b5023/partner/64/SkypeSetupFull.exe - ORIGINAL_DST/23.206.224.205 application/x-msdownload
1483112851.541     82 192.168.1.112 TCP_MISS/302 666 GET http://ui.skype.com/ui/0/7.24.0.104/en/upgrade - ORIGINAL_DST/157.56.109.8 text/html
1483112851.584     40 192.168.1.112 TCP_MISS/302 543 GET http://get.skype.com/go/getskype-upgrade-new? - ORIGINAL_DST/40.80.146.203 text/html
1483112852.603   1016 192.168.1.112 TCP_MISS/206 805879 GET http://download.skype.com/f770ec8c5f481786ef5f9463271b5023/partner/64/SkypeSetupFull.exe - ORIGINAL_DST/23.206.224.205 application/x-msdownload
1483112852.757     77 192.168.1.112 TCP_MISS/302 666 GET http://ui.skype.com/ui/0/7.24.0.104/en/upgrade - ORIGINAL_DST/157.56.109.8 text/html
1483112852.801     41 192.168.1.112 TCP_MISS/302 543 GET http://get.skype.com/go/getskype-upgrade-new? - ORIGINAL_DST/40.80.146.203 text/html
1483112852.834     29 192.168.1.112 TCP_MISS/412 311 GET http://download.skype.com/f770ec8c5f481786ef5f9463271b5023/partner/80/SkypeSetupFull.exe - ORIGINAL_DST/23.206.224.205 text/html

Does anyone know what could be happening?

KOM

Without a lot of manual tweaking, squid doesn't cache much these. To be cached, the request must meet a bunch of criteria such as name, file size, file date, content expiry policies plus others. URLs with a ? are not cached, and other dynamic content also isn't cached by design. There are tutorials online as to how to play with the refresh_patterns and other squid directives.

Vinay2011

Hi am using Squid 3.3.8 on Ubuntu 14.04. I have default configuration for Squid config file . The request is passing via Squid but its not caching the contents/images/css , everytime am getting TCP_MISS 200 for each request getting logged in squid access logs.

###################SQUID CONF entries #####################################
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

Recommended minimum Access Permission configuration:

Deny requests to certain unsafe ports

http_access deny !Safe_ports

Deny CONNECT to other than secure SSL ports

http_access deny CONNECT !SSL_ports

Only allow cachemgr access from localhost

http_access allow localhost manager
http_access deny manager

We strongly recommend the following be uncommented to protect innocent

web applications running on the proxy server who think the only

one who can access services on "localhost" is a local user

http_access deny to_localhost

INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

Example rule allowing access from your local networks.

Adapt localnet in the ACL section to list your (internal) IP networks

from where browsing should be allowed

http_access allow localnet
http_access allow localhost

And finally deny all other access to this proxy

http_access deny all

Squid normally listens to port 3128

http_port 3128

Uncomment and adjust the following to add a disk cache directory.

cache_dir ufs /var/spool/squid 102400 16 256

Leave coredumps in the first cache dir

coredump_dir /var/spool/squid

Add any of your own refresh_pattern entries above these.

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|?) 0 0% 0
refresh_pattern . 0 20% 4320

Max Object Size Cache

maximum_object_size 10240 KB
##############################################################

Let me know if Squid 3.3.8 is compatible with Ubuntu 14.04 or not? if not what are the compatible versions with Ubuntu 14.04 as i cant change Ubuntu version.
what changes need to be done to cache the contents ?

Let me know if any changes required in the Squid conf entries.

KOM

I think you must have somehow confused this pfSense Support forum with a Ubuntu or squid forum. No, we can't tell you about compatibility between squid and Ubuntu.

Topper727

I seen alot of the same thing and wondered even if my proxy was working. so in pfsense 2.0 I think I started looking for something to tell me how many hits and misses.. I found something and made it work in pfsense 2.0 and up to the latest version as of today. I am trying to make a package for it.

Here is what i did so far for it.

https://forum.pfsense.org/index.php?topic=87982.0