Henrik, My mistake, the http packets are NOT being forwarded, the router shows that all buckets are assigned to this single cache. I am not sure how to tell if the GRE decapsulation is working properly. Running the tcpdump I can see: I can see the cache sending a 52 (length) udp port 2048 to the router on udp 2048, and immediately after the exact opposite, except the length is 64. This happens every 10-11 seconds. How can I tell if the GRE decapsulation is working properly? Thanks, Bryan -----Original Message----- From: Henrik Nordstrom [mailto:hno@xxxxxxxxxxxxxxx] Sent: October 3, 2005 5:27 PM To: Shoebottom, Bryan Cc: Squid Users Subject: Re: WCCP: Web Cache ID 0.0.0.0 On Mon, 3 Oct 2005, Shoebottom, Bryan wrote: > Yes. It assigns the buckets and starts forwarding http packets but the > proxy doesn't seem to respond. Then the next is to verify the WCCP/GRE decapsulation. This is done by running tcpdump. With tcpdump you should see both a) The GRE packets coming from the router b) The decapsulated TCP/IP packets with the source of the clients tcpdump -i any -n If you only see 'a' then the GRE decapsulation is not configured proper. If you see 'b' but the packets seems to be completely ignored then the problem is your firewall/nat rules for intercepting port 80 traffic on the proxy, or perhaps routing policy if running Linux (rp_filter needs to be disabled when using GRE). If you see 'b' and also response packets then all the networking is set up proper, and your problem is within the proxy config. Regards Henrik
