yes my squid working good only stops inbetween cant tell when it will stop, it may work like charm till evening and then suddenly stop, and its never slows down, if its die i dont have to restart the box just restart the squid service only. this is the situation

ok this is fine
$IPT -t nat -A PREROUTING -i $LOCAL_IFACE -p tcp --dport 80 -j REDIRECT --to-port 3128
....
echo "1" > /proc/sys/net/ipv4/ip_forward
.......
$IPT -t mangle -A POSTROUTING -m layer7 --l7proto rtsp -j DROP
#$IPT -t mangle -A POSTROUTING -m layer7 --l7proto shoutcast -j DROP
$IPT -t mangle -A POSTROUTING -m layer7 --l7proto ares -j DROP
$IPT -t mangle -A POSTROUTING -m layer7 --l7proto edonkey -j DROP
....
you have a parched kernel with layer7 ??
you have this ??

yes i have patched kernel and that all working fine only problem with squid i have

Can you just post the folowing:-


1. Whenever squid dies, just check whether it is possible to open any site from the PC on which squid is running ?

2. Get the contents of cache.log immediately in this situation and post here.

3. Restart squid service and once again post the contents of cache.log here for analysis.



rajesh.bahl

I will repeat myself again (and again):
RESOURCES!!!
Please tell us what your resources are like (*memory, hdd, hardware, os configs, etc) are u running X on your proxy server.

hello sorry for late reply two days was off below i am giving my system config and whn next time squid down i will give the cache result

Fedora Core 8
Kernel 2.6.54.4
Gnome 2.20.3
Memory 2 Gib

Dual Processors : Amd Athlon 64x2 core pro 3800+

Also Runnig with ip route for dual gateway


hard drive
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
470889384 9605252 436978468 3% /
/dev/sda1 194442 28396 156007 16% /boot
tmpfs 1037624 12 1037612 1% /dev/shm

Memory

total used free shared buffers cached
Mem: 2026 914 1112 0 144 525
-/+ buffers/cache: 244 1782
Swap: 1983 0 1983
Total: 4010 914 3096

how many clients do you have?? this for the minimun requeriments of squid ?
after for your total memory use:
and for your CPu's:

i have around 80 to 90 users using squid

grep MemTotal /proc/meminfo : MemTotal: 2075252 kB

cat /proc/cpuinfo | grep processor | wc -l : 2

Can't you easily see that you are running out of memory, over 80% utilisation. so probably this goes up as more clients connect. Capture these stats when squid stops!
Also during the timne when squid is busted, do a # top and a # ps aux | grep squid

total used free shared buffers cached
2026 914 1112 0 144 525
-/+ buffers/cache: 244 1782
Swap: 1983 0 1983
Total: 4010 914 3096


this is how memory status i belive its less than 50 %

OK, I had not looked carefully at the formatting of the out (which is hard in this case since its lost when pasted to web page)
Post output of the command I indicated above, when squid goes bust.

below is the result of command u have told me

top
3144 admin 20 0 109m 42m 11m S 23 2.1 23:29.40 nautilus
2371 root 20 0 160m 8768 5996 S 0 0.4 0:39.39 X
14653 squid 20 0 121m 118m 2216 S 0 5.8 0:21.53 squid
15007 root 20 0 2272 1032 788 R 0 0.0 0:00.01 top
1 root 20 0 2112 660 572 S 0 0.0 0:01.13 init
2 root 15 -5 0 0 0 S 0 0.0 0:00.00 kthreadd
3 root RT -5 0 0 0 S 0 0.0 0:00.00 migration/0
4 root 15 -5 0 0 0 S 0 0.0 0:01.19 ksoftirqd/0
5 root RT -5 0 0 0 S 0 0.0 0:00.00 watchdog/0
6 root RT -5 0 0 0 S 0 0.0 0:00.00 migration/1
7 root 15 -5 0 0 0 S 0 0.0 0:01.06 ksoftirqd/1
8 root RT -5 0 0 0 S 0 0.0 0:00.00 watchdog/1
9 root 15 -5 0 0 0 S 0 0.0 0:15.47 events/0
10 root 15 -5 0 0 0 S 0 0.0 0:02.87 events/1
11 root 15 -5 0 0 0 S 0 0.0 0:00.00 khelper
64 root 15 -5 0 0 0 S 0 0.0 0:00.02 kblockd/0
65 root 15 -5 0 0 0 S 0 0.0 0:00.00 kblockd/1



ps aux | grep squid

root 14651 0.0 0.0 7748 1260 ? Ss 11:52 0:00 squid -D
squid 14653 0.2 5.7 123720 119828 ? S 11:52 0:21 (squid) -D
squid 14656 0.0 0.0 1600 228 ? Ss 11:52 0:00 (unlinkd)
root 15004 0.0 0.0 4048 684 pts/1 S+ 14:26 0:00 grep squid

was this output taken AT THE TIME SQUID WENT BUST??
also during that time, I want to see, # ps aux | awk '{if ($3>'20') {print $1, $2, $3, $4, $8, $11} }'

yes it was when squid bust, ok next time when it bust i will give you that
thanks

Maybe your acl not use netmask, please change exp :

acl ibin src 192.0.0.32/255.255.255.255

===
emm... please check your log but before check it please restart your squid, then quickly check

#tail -n 15 /var/log/daemon.log
#tail -n 15 /var/log/messages
#tail -n 15 /var/log/syslog