From: Henrik Nordstrom <henrik@xxxxxxxxxxxxxxx>
Date: Tue, 18 Sep 2007 16:57:58 +0200
On mån, 2007-09-17 at 16:30 -0500, sgmayo@xxxxxxxxxxxxxxxxxxxxxxxxx wrote:
>> Could spyware or addware cause the store.log to fill up very quickly?
Another tech has had troubles with this in the last couple of days and
was
>> asking. He says that they can clear it out and in no time (not sure how
long, but under an hour) it is filled up and causing problems.
>> Here is a small post of what was in it. Why does it list all the ?????
Thanks for any info.
>> 1190033958.390 RELEASE -1 FFFFFFFF 7B1287005AF9902646FDACC9F3EA9C7F ? ?
? ? ?/? ?/? ? ?
>Looks a bit odd.. the ? is when the information is unknown, but these
objects was in memory so the information should have been known I think..
>What do access.log say?
>Regards
>Henrik
He thought he had it figured out, but started getting this problem again
so I am sending his other log files.
Thanks for any info.
--
Scott Mayo
System Administrator
Bloomfield Schools
----------------------------------------------------------------------------
Squid cache.log
2007/10/04 12:09:23| Starting Squid Cache version 2.4.STABLE7 for
i586-mandrake-linux-gnu...
2007/10/04 12:09:23| Process ID 21644
2007/10/04 12:09:23| With 1024 file descriptors available
2007/10/04 12:09:23| DNS Socket created on FD 4
2007/10/04 12:09:23| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2007/10/04 12:09:23| User-Agent logging is disabled.
2007/10/04 12:09:23| Unlinkd pipe opened on FD 9
2007/10/04 12:09:23| Swap maxSize 1024000 KB, estimated 78769 objects
2007/10/04 12:09:23| Target number of buckets: 3938
2007/10/04 12:09:23| Using 8192 Store buckets
2007/10/04 12:09:23| Max Mem size: 16384 KB
2007/10/04 12:09:23| Max Swap size: 1024000 KB
2007/10/04 12:09:23| Store logging disabled
2007/10/04 12:09:23| Rebuilding storage in /var/spool/squid (DIRTY)
2007/10/04 12:09:23| Using Least Load store dir selection
2007/10/04 12:09:23| Set Current Directory to /var/spool/squid
2007/10/04 12:09:23| Loaded Icons.
2007/10/04 12:09:24| Accepting HTTP connections at 0.0.0.0, port 8080, FD 10.
2007/10/04 12:09:24| Accepting HTCP messages on port 4827, FD 12.
2007/10/04 12:09:24| Accepting SNMP messages on port 3401, FD 13.
2007/10/04 12:09:24| WCCP Disabled.
2007/10/04 12:09:24| Ready to serve requests.
2007/10/04 12:09:24| Store rebuilding is 1.1% complete
2007/10/04 12:09:32| diskHandleWrite: FD 7: disk write error: (28) No
space left on device
FATAL: Write failure -- check your disk space and cache.log
Squid Cache (Version 2.4.STABLE7): Terminated abnormally.
CPU Usage: 7.880 seconds = 4.090 user + 3.790 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 399
Memory usage for squid via mallinfo():
total space in arena: 8550 KB
Ordinary blocks: 7896 KB 162 blks
Small blocks: 0 KB 0 blks
Holding blocks: 176 KB 1 blks
Free Small blocks: 0 KB
Free Ordinary blocks: 654 KB
Total in use: 8072 KB 94%
Total free: 654 KB 8%
2007/10/04 12:09:35| Starting Squid Cache version 2.4.STABLE7 for
i586-mandrake-linux-gnu...
2007/10/04 12:09:35| Process ID 21668
2007/10/04 12:09:35| With 1024 file descriptors available
2007/10/04 12:09:35| DNS Socket created on FD 4
2007/10/04 12:09:35| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2007/10/04 12:09:35| User-Agent logging is disabled.
2007/10/04 12:09:35| Unlinkd pipe opened on FD 9
2007/10/04 12:09:35| Swap maxSize 1024000 KB, estimated 78769 objects
2007/10/04 12:09:35| Target number of buckets: 3938
2007/10/04 12:09:35| Using 8192 Store buckets
2007/10/04 12:09:35| Max Mem size: 16384 KB
2007/10/04 12:09:35| Max Swap size: 1024000 KB
2007/10/04 12:09:35| Store logging disabled
2007/10/04 12:09:35| Rebuilding storage in /var/spool/squid (DIRTY)
2007/10/04 12:09:35| Using Least Load store dir selection
2007/10/04 12:09:35| Set Current Directory to /var/spool/squid
2007/10/04 12:09:35| Loaded Icons.
2007/10/04 12:09:35| Accepting HTTP connections at 0.0.0.0, port 8080, FD 10.
2007/10/04 12:09:35| Accepting HTCP messages on port 4827, FD 12.
2007/10/04 12:09:35| Accepting SNMP messages on port 3401, FD 13.
2007/10/04 12:09:35| WCCP Disabled.
2007/10/04 12:09:35| Ready to serve requests.
2007/10/04 12:09:36| Store rebuilding is 1.1% complete
2007/10/04 12:09:43| diskHandleWrite: FD 7: disk write error: (28) No
space left on device
FATAL: Write failure -- check your disk space and cache.log
Squid Cache (Version 2.4.STABLE7): Terminated abnormally.
CPU Usage: 7.810 seconds = 3.990 user + 3.820 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 399
Memory usage for squid via mallinfo():
total space in arena: 8554 KB
Ordinary blocks: 7855 KB 172 blks
Small blocks: 0 KB 0 blks
Holding blocks: 176 KB 1 blks
Free Small blocks: 0 KB
Free Ordinary blocks: 699 KB
Total in use: 8031 KB 94%
Total free: 699 KB 8%
2007/10/04 12:09:46| Starting Squid Cache version 2.4.STABLE7 for
i586-mandrake-linux-gnu...
2007/10/04 12:09:46| Process ID 21678
2007/10/04 12:09:46| With 1024 file descriptors available
2007/10/04 12:09:46| DNS Socket created on FD 4
2007/10/04 12:09:46| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2007/10/04 12:09:46| User-Agent logging is disabled.
2007/10/04 12:09:46| Unlinkd pipe opened on FD 9
2007/10/04 12:09:46| Swap maxSize 1024000 KB, estimated 78769 objects
2007/10/04 12:09:46| Target number of buckets: 3938
2007/10/04 12:09:46| Using 8192 Store buckets
2007/10/04 12:09:46| Max Mem size: 16384 KB
2007/10/04 12:09:46| Max Swap size: 1024000 KB
2007/10/04 12:09:46| Store logging disabled
2007/10/04 12:09:46| Rebuilding storage in /var/spool/squid (DIRTY)
2007/10/04 12:09:46| Using Least Load store dir selection
2007/10/04 12:09:46| Set Current Directory to /var/spool/squid
2007/10/04 12:09:46| Loaded Icons.
2007/10/04 12:09:47| Accepting HTTP connections at 0.0.0.0, port 8080, FD 10.
2007/10/04 12:09:47| Accepting HTCP messages on port 4827, FD 12.
2007/10/04 12:09:47| Accepting SNMP messages on port 3401, FD 13.
2007/10/04 12:09:47| WCCP Disabled.
2007/10/04 12:09:47| Ready to serve requests.
2007/10/04 12:09:47| Store rebuilding is 1.1% complete
[root@localhost squid]#
Squid access.log
[root@localhost squid]# tail -f access.log
http://www.hawaiiweb.com/images/view_itinerary_button.jpg -
DIRECT/209.235.183.14 image/jpeg
1191520478.436 459 10.0.0.1 TCP_MISS/200 2830 GET
http://www.hawaiiweb.com/images/order_button.jpg - DIRECT/209.235.183.14
image/jpeg
1191520478.441 359 10.0.0.1 TCP_MISS/200 194 GET
http://ads.trueweather.com/scripts/ad.dll? - DIRECT/208.188.166.68
text/html
1191520478.501 106 10.0.0.1 TCP_MISS/200 8725 GET
http://www.hawaiiweb.com/images/buttons.swf - DIRECT/209.235.183.14
application/x-shockwave-flash
1191520478.559 123 10.0.0.1 TCP_MISS/200 2933 GET
http://www.hawaiiweb.com/images/TOP_PHOTOgallery03.swf -
DIRECT/209.235.183.14 application/x-shockwave-flash
1191520478.830 326 10.0.0.1 TCP_MISS/200 24100 GET
http://www.hawaiiweb.com/images/buttons.swf - DIRECT/209.235.183.14
application/x-shockwave-flash
1191520478.906 357 10.0.0.1 TCP_MISS/200 36474 GET
http://www.hawaiiweb.com/images/TOP_PHOTOgallery03.swf -
DIRECT/209.235.183.14 application/x-shockwave-flash
1191520479.103 156 10.0.0.1 TCP_MISS/200 194 GET
http://ads.trueweather.com/scripts/ad.dll? - DIRECT/208.188.166.68
text/html
1191520479.126 989 10.0.0.1 TCP_MISS/503 994 GET http://10.0.0.1/ -
NONE/- -
1191520479.734 129 10.0.0.1 TCP_MISS/302 1051 GET
http://mail.live.com/default.aspx? - DIRECT/207.46.10.121 text/html
1191520480.764 1000 10.0.0.1 TCP_MISS/200 29809 GET
http://bl105w.blu105.mail.live.com/mail/TodayLight.aspx? -
DIRECT/65.55.183.7 text/html
1191520486.713 144 10.0.0.1 TCP_MISS/200 169 GET
http://packet.trueweather.com/scripts/tw.dll? - DIRECT/208.188.167.200
text/html
1191520487.855 475 10.0.0.1 TCP_MISS/200 51031 GET
http://www.mydjconnection.com/articles/2007/09/26/news/doc46fa7e4fc22a6299492617.txt
- DIRECT/192.104.182.100 text/html
1191520488.122 411 10.0.0.1 TCP_MISS/200 2083 GET
http://www.flight-toys.com/bola/bola_uruguay2.html - DIRECT/72.22.69.152
text/html
1191520488.758 532 10.0.0.1 TCP_MISS/200 14515 GET
http://www.flight-toys.com/bola/bola_uruguay2.jpg - DIRECT/72.22.69.152
image/jpeg
1191520489.102 81 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/shared/css/main-styles.css -
DIRECT/192.104.182.100 -
1191520489.185 163 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/shared/js/common.js - DIRECT/192.104.182.100
-
1191520489.318 100 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/shared/css/news.css - DIRECT/192.104.182.100
-
1191520489.534 174 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/art/sslkey.gif - DIRECT/192.104.182.100 -
1191520489.546 185 10.0.0.1 TCP_SWAPFAIL_MISS/200 8291 GET
http://www.mydjconnection.com/shared-content/adsys/creative.js -
DIRECT/192.104.182.100 application/x-javascript
1191520489.557 196 10.0.0.1 TCP_SWAPFAIL_MISS/304 481 GET
http://images.townnews.com/dailyjournalonline.com/art/logo-w-arrow.gif -
DIRECT/72.51.48.4 image/gif
1191520489.720 110 10.0.0.1 TCP_MISS/302 382 GET
http://adsys.townnews.com/62489134/creative/dailyjournalonline.com/archives+leaderboard/88385.gif
- DIRECT/192.104.182.105 -
1191520489.734 124 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/art/new-icon.gif - DIRECT/192.104.182.100 -
1191520489.821 165 10.0.0.1 TCP_MISS/200 451 GET
http://www.mydjconnection.com/art/shade-archives.gif -
DIRECT/192.104.182.100 image/gif
1191520489.833 177 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/shared/js/s_code.js - DIRECT/192.104.182.100
-
1191520489.846 97 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/art/shade.gif - DIRECT/192.104.182.100 -
1191520490.031 298 10.0.0.1 TCP_SWAPFAIL_MISS/200 22208 GET
http://adimages.townnews.com/creative/dailyjournalonline.com/88385.gif -
DIRECT/72.51.48.4 image/gif
1191520490.036 86 10.0.0.1 TCP_MISS/304 481 GET
http://images.townnews.com/dailyjournalonline.com/art/news-tasks/undo_12.png
- DIRECT/72.51.48.4 image/png
1191520490.036 86 10.0.0.1 TCP_MISS/304 143 GET
http://www.mydjconnection.com/art/news-tasks/mail_12.png -
DIRECT/192.104.182.100 -
1191520490.045 95 10.0.0.1 TCP_MISS/304 143 GET
http://www.mydjconnection.com/art/news-tasks/print_12.png -
DIRECT/192.104.182.100 -
1191520490.051 91 10.0.0.1 TCP_MISS/304 143 GET
http://www.mydjconnection.com/art/news-tasks/comments_12.png -
DIRECT/192.104.182.100 -
1191520490.168 218 10.0.0.1 TCP_MISS/200 540 GET
http://leeenterprises.112.2o7.net/b/ss/lee-dailyjournalonlinecom/1/H.7-pdv-2/s57743546547378?
- DIRECT/128.241.21.149 image/gif
1191520490.197 79 10.0.0.1 TCP_MISS/304 143 GET
http://www.mydjconnection.com/art/comments.gif - DIRECT/192.104.182.100 -
1191520490.208 90 10.0.0.1 TCP_MISS/304 143 GET
http://www.mydjconnection.com/shared-content/newsys/common/simpleblog.js -
DIRECT/192.104.182.100 -
1191520490.396 71 10.0.0.1 TCP_SWAPFAIL_MISS/200 787 GET
http://images.townnews.com/dailyjournalonline.com/art/news-tasks/search_12.png
- DIRECT/72.51.48.4 image/png
1191520490.421 80 10.0.0.1 TCP_MISS/302 382 GET
http://adsys.townnews.com/52665164/creative/dailyjournalonline.com/archives+rectangle/94808.gif
- DIRECT/192.104.182.105 -
1191520490.427 102 10.0.0.1 TCP_SWAPFAIL_MISS/304 481 GET
http://images.townnews.com/dailyjournalonline.com/art/news-tasks/comments_12.png
- DIRECT/72.51.48.6 image/png
1191520490.449 209 10.0.0.1 TCP_MISS/200 3779 GET
http://www.mydjconnection.com/shared-content/newsys/common/generatecaptcha.png
- DIRECT/192.104.182.100 image/png
1191520490.455 93 10.0.0.1 TCP_MISS/302 381 GET
http://adsys.townnews.com/14165249/creative/dailyjournalonline.com/topads3/50459.js
- DIRECT/192.104.182.105 -
1191520490.569 79 10.0.0.1 TCP_MISS/304 143 GET
http://dailyjournalonline.com/content/topx/media/thumb_24020f740d03681733e6139684593b0a.jpg
- DIRECT/192.104.182.100 -
1191520490.599 123 10.0.0.1 TCP_MISS/304 143 GET
http://dailyjournalonline.com/content/topx/media/thumb_c35e15cb595a79c2346af271fc8b82f1.jpg
- DIRECT/192.104.182.100 -
1191520490.599 159 10.0.0.1 TCP_SWAPFAIL_MISS/200 15074 GET
http://adimages.townnews.com/creative/dailyjournalonline.com/94808.gif -
DIRECT/72.51.48.4 image/gif
1191520490.606 951 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/art/mainmenu-bg.gif - DIRECT/192.104.182.100
-
1191520490.644 56 10.0.0.1 TCP_MISS/302 381 GET
http://adsys.townnews.com/41476417/creative/dailyjournalonline.com/tophomes/69327.js
- DIRECT/192.104.182.105 -
1191520490.869 136 10.0.0.1 TCP_MISS/200 3206 GET
http://dailyjournalonline.com/content/topx/media/thumb_c25eb0e798afa857814ff9c0aa58758d.jpg
- DIRECT/192.104.182.100 image/jpeg
1191520490.913 119 10.0.0.1 TCP_MISS/200 4160 GET
http://dailyjournalonline.com/content/topx/media/thumb_d8e026201f0b0bb905356c76e4c14785.jpg
- DIRECT/192.104.182.100 image/jpeg
1191520490.913 119 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/art/news-tasks/home_12.png -
DIRECT/192.104.182.100 -
1191520490.942 148 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/art/news-tasks/arrow-up_12.png -
DIRECT/192.104.182.100 -
1191520490.987 129 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/art/news-tasks/archives_12.png -
DIRECT/192.104.182.100 -
1191520491.011 154 10.0.0.1 TCP_SWAPFAIL_MISS/304 143 GET
http://www.mydjconnection.com/art/news-tasks/rss_12.png -
DIRECT/192.104.182.100 -
1191520493.277 197 10.0.0.1 TCP_MISS/200 194 GET
http://ads.trueweather.com/scripts/ad.dll? - DIRECT/208.188.166.68
text/html
1191520494.082 136 10.0.0.1 TCP_MISS/200 194 GET
http://ads.trueweather.com/scripts/ad.dll? - DIRECT/208.188.166.68
text/html
1191520502.760 76 10.0.0.1 TCP_MISS/200 327 HEAD
http://download.windowsupdate.com/v7/windowsupdate/redir/wuredir.cab? -
DIRECT/150.199.0.229 application/octet-stream
1191520505.851 218 10.0.0.1 TCP_MISS/200 327 HEAD
http://www.update.microsoft.com/v7/windowsupdate/selfupdate/wuident.cab? -
DIRECT/207.46.18.74 application/octet-stream
1191520505.967 52 10.0.0.1 TCP_MISS/200 328 HEAD
http://download.windowsupdate.com/v7/windowsupdate/a/selfupdate/WSUS3/x86/Other/wsus3setup.cab?
- DIRECT/150.199.0.229 application/octet-stream
1191520506.190 206 10.0.0.1 TCP_MISS/200 25712 GET
http://download.windowsupdate.com/v7/windowsupdate/a/selfupdate/WSUS3/x86/Other/wsus3setup.cab?
- DIRECT/150.199.0.229 application/octet-stream
1191520508.233 153 10.0.0.1 TCP_MISS/200 194 GET
http://ads.trueweather.com/scripts/ad.dll? - DIRECT/208.188.166.68
text/html
1191520509.073 127 10.0.0.1 TCP_MISS/200 194 GET
http://ads.trueweather.com/scripts/ad.dll? - DIRECT/208.188.166.68
text/html
1191520514.317 98 10.0.0.1 TCP_MISS/200 327 HEAD
http://download.windowsupdate.com/v7/windowsupdate/redir/wuredir.cab? -
DIRECT/150.199.0.229 application/octet-stream
1191520517.613 201 10.0.0.1 TCP_CLIENT_REFRESH_MISS/200 878 GET
http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl -
DIRECT/131.107.115.28 application/pkix-crl
1191520518.720 514 10.0.0.1 TCP_MISS/503 994 GET http://10.0.0.1/ -
NONE/- -
1191520519.307 209 10.0.0.1 TCP_MISS/200 1424 GET
http://www.flight-toys.com/bola/bola_china1.html - DIRECT/72.22.69.152
text/html
1191520520.038 702 10.0.0.1 TCP_MISS/200 64994 GET
http://www.flight-toys.com/bola/bola_china1.jpg - DIRECT/72.22.69.152
image/jpeg
[root@localhost squid]#
Squid messages
[root@localhost log]# tail -f messages
Oct 4 13:57:16 fw (squid): Write failure -- check your disk space and
cache.log
Oct 4 13:57:16 fw squid[11484]: Squid Parent: child process 16040 exited
due to signal 6
Oct 4 13:57:17 fw dansguardian: Error connecting to proxy
Oct 4 13:57:19 fw last message repeated 3 times
Oct 4 13:57:19 fw squid[11484]: Squid Parent: child process 16079 started
Oct 4 13:57:33 fw (squid): Write failure -- check your disk space and
cache.log
Oct 4 13:57:33 fw squid[11484]: Squid Parent: child process 16079 exited
due to signal 6
Oct 4 13:57:33 fw dansguardian: Error connecting to proxy
Oct 4 13:57:34 fw last message repeated 26 times
Oct 4 13:57:36 fw squid[11484]: Squid Parent: child process 16228 started
Oct 4 13:57:47 fw dhcpd: DHCPINFORM from 10.0.1.222 via eth0: not
authoritative for subnet 10.0.0.0
Oct 4 13:57:50 fw dhcpd: DHCPINFORM from 10.0.1.222 via eth0: not
authoritative for subnet 10.0.0.0
Oct 4 13:57:50 fw (squid): Write failure -- check your disk space and
cache.log
Oct 4 13:57:50 fw squid[11484]: Squid Parent: child process 16228 exited
due to signal 6
Oct 4 13:57:50 fw dansguardian: Error connecting to proxy
Oct 4 13:57:53 fw last message repeated 19 times
Oct 4 13:57:53 fw squid[11484]: Squid Parent: child process 16372 started
Oct 4 13:57:54 fw dansguardian: Error connecting to proxy
Oct 4 13:57:57 fw kernel: Shorewall:lan2all:REJECT:IN=eth0 OUT=eth1
SRC=10.0.6.103 DST=85.17.52.92 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=28065
DF PROTO=TCP SPT=4277 DPT=5000 WINDOW=65535 RES=0x00 SYN URGP=0
Oct 4 13:57:58 fw kernel: Shorewall:fw2all:REJECT:IN= OUT=eth0
SRC=10.0.0.1 DST=10.0.4.236 LEN=56 TOS=0x00 PREC=0xC0 TTL=255 ID=43670
PROTO=ICMP TYPE=11 CODE=0 [SRC=10.0.4.236 DST=144.74.112.0 LEN=28 TOS=0x00
PREC=0x00 TTL=1 ID=41025 PROTO=ICMP TYPE=8 CODE=0 ID=474 SEQ=59712 ]
Oct 4 13:58:00 fw CROND[16391]: (root) CMD (
/usr/share/msec/promisc_check.sh)
Oct 4 13:58:06 fw (squid): Write failure -- check your disk space and
cache.log
Oct 4 13:58:06 fw squid[11484]: Squid Parent: child process 16372 exited
due to signal 6
Oct 4 13:58:06 fw dansguardian: Error connecting to proxy
Oct 4 13:58:09 fw last message repeated 36 times
Oct 4 13:58:09 fw squid[11484]: Squid Parent: child process 16513 started
Oct 4 13:58:28 fw (squid): Write failure -- check your disk space and
cache.log
Oct 4 13:58:28 fw squid[11484]: Squid Parent: child process 16513 exited
due to signal 6
Oct 4 13:58:28 fw dansguardian: Error connecting to proxy
Oct 4 13:58:30 fw last message repeated 16 times
Oct 4 13:58:31 fw squid[11484]: Squid Parent: child process 16768 started
Oct 4 13:58:42 fw (squid): Write failure -- check your disk space and
cache.log
Oct 4 13:58:42 fw squid[11484]: Squid Parent: child process 16768 exited
due to signal 6
Oct 4 13:58:44 fw dansguardian: Error connecting to proxy
Oct 4 13:58:45 fw squid[11484]: Squid Parent: child process 16859 started
Oct 4 13:58:56 fw (squid): Write failure -- check your disk space and
cache.log
Oct 4 13:58:56 fw squid[11484]: Squid Parent: child process 16859 exited
due to signal 6
Oct 4 13:58:56 fw dansguardian: Error connecting to proxy
Oct 4 13:58:58 fw last message repeated 2 times
Oct 4 13:58:59 fw squid[11484]: Squid Parent: child process 16890 started
Oct 4 13:59:01 fw CROND[16895]: (root) CMD (
/usr/share/msec/promisc_check.sh)
Oct 4 13:59:18 fw (squid): Write failure -- check your disk space and
cache.log
Oct 4 13:59:18 fw squid[11484]: Squid Parent: child process 16890 exited
due to signal 6
Oct 4 13:59:18 fw dansguardian: Error connecting to proxy
Oct 4 13:59:20 fw last message repeated 49 times
Oct 4 13:59:21 fw squid[11484]: Squid Parent: child process 17110 started
Oct 4 13:59:52 fw kernel: Shorewall:wan2all:DROP:IN=eth1 OUT=
MAC=00:d0:b7:75:26:e6:00:12:d9:d7:87:48:08:00 SRC=160.79.128.12
DST=150.199.183.1 LEN=1498 TOS=0x00 PREC=0x00 TTL=120 ID=32384 PROTO=UDP
SPT=5004 DPT=4564 LEN=1478
Oct 4 13:59:52 fw kernel: Shorewall:wan2all:DROP:IN=eth1 OUT=
MAC=00:d0:b7:75:26:e6:00:12:d9:d7:87:48:08:00 SRC=160.79.128.12
DST=150.199.183.1 LEN=1499 TOS=0x00 PREC=0x00 TTL=120 ID=32385 PROTO=UDP
SPT=5004 DPT=4564 LEN=1479
Oct 4 14:00:00 fw CROND[17195]: (root) CMD (
/usr/share/msec/promisc_check.sh)
Oct 4 14:00:00 fw CROND[17198]: (root) CMD ( /usr/sbin/ntpdate -u
time-ext.missouri.edu )
Oct 4 14:00:00 fw CROND[17199]: (root) CMD ( /usr/sbin/monitoring.pl)
Oct 4 14:00:09 fw (squid): Write failure -- check your disk space and
cache.log
Oct 4 14:00:09 fw squid[11484]: Squid Parent: child process 17110 exited
due to signal 6
Oct 4 14:00:09 fw dansguardian: Error connecting to proxy
Oct 4 14:00:11 fw last message repeated 4 times
Oct 4 14:00:12 fw squid[11484]: Squid Parent: child process 17301 started
