Squid running?

PREVIOUSLY:
--------------------------------
Squid 2.2.STABLE4 runs as a process under RH6.1 My Win95 workstations
access the Internet through it. But ... the cache.log tells me, among other
things:

helperOpen Servers: Starting 5 "dnsserver" processes
Unlinked pipe opened on FD 10
........ <snip>
Loaded icons.
commBind: Cannot bind socket FD 33 to *:3128 (98) Address already in use
FATAL: Cannot open HTTP Port
Squid cache (Version 2.2.STABLE4): Terminated abnormally

The workstations were still accessing the Internet an hour after the
time-stamp on the log.
--------------------------------

*please also note: until I configured squid.conf with
             acl ourhosts src 10.1.1.0/255.255.255.0
             http_access allow ourhosts
none of my Windows machines connected. So I took that to mean that squid
was running. Even after the cache.log said that squid terminated, the
machines connect.

Now, following the advice of the several people who responded to the earlier
message, I ran lsof and then, lsof -i. Also netstat -a and ps -auxww.
These gave me information -- reams of it. I lack the experience to
interpret it all, so I am posting some snips, in the hopes that you-all will
be able to tell me what some of it means.

++++ from lsof -i
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
squid 601 root 2u IPv4 756 TCP
localhost:1025->localhost:1024 (ESTABLISHED)
squid 601 root 3u IPv4 759 TCP
localhost:1027->localhost:1026 (ESTABLISHED)
squid 601 root 4u IPv4 762 TCP
localhost:1029->localhost:1028 (ESTABLISHED)
squid 601 root 5u IPv4 765 TCP
localhost:1031->localhost:1030 (ESTABLISHED)
squid 601 root 6u IPv4 768 TCP
localhost:1033->localhost:1032 (ESTABLISHED)
squid 601 root 33u IPv4 785 TCP *:3128 (LISTEN)
squid 601 root 34u IPv4 786 UDP *:icp

There are also 10 dnsserver processes running. (saving space and not
listing them) But two are listed for each localhost.

++++ from netstat -a

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 *:3128 *:* LISTEN
tcp 0 0 localhost:1032 localhost:1033
ESTABLISHED
tcp 0 0 localhost:1033 localhost:1032
ESTABLISHED
tcp 0 0 localhost:1030 localhost:1031
ESTABLISHED
tcp 0 0 localhost:1031 localhost:1030
ESTABLISHED
tcp 0 0 localhost:1028 localhost:1029
ESTABLISHED
tcp 0 0 localhost:1029 localhost:1028
ESTABLISHED
tcp 0 0 localhost:1026 localhost:1027
ESTABLISHED
tcp 0 0 localhost:1027 localhost:1026
ESTABLISHED
tcp 0 0 localhost:1024 localhost:1025
ESTABLISHED
tcp 0 0 localhost:1025 localhost:1024
ESTABLISHED
tcp 0 0 *:smtp *:* LISTEN

++++ from ps -auxww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 566 0.0 0.8 2112 1144 ? S 02:29 0:00 sendmail:
accepting connections on port 25
root 583 0.0 0.3 1144 476 ? S 02:29 0:00 gpm -t ps/2
root 598 0.0 0.7 3400 948 ? S 02:29 0:00 squid -D
squid 601 0.0 4.0 6816 5224 ? S 02:29 0:00 (squid) -D
squid 615 0.0 0.5 1476 700 ? S 02:29 0:00 (dnsserver)
squid 616 0.0 0.5 1476 700 ? S 02:29 0:00 (dnsserver)
squid 617 0.0 0.3 1336 496 ? S 02:29 0:00 (dnsserver)
squid 618 0.0 0.3 1336 496 ? S 02:29 0:00 (dnsserver)
squid 619 0.0 0.3 1336 496 ? S 02:29 0:00 (dnsserver)
xfs 620 0.0 0.9 2156 1252 ? S 02:29 0:00
xfs -droppriv -daemon -port -1
squid 627 0.0 0.2 1064 320 ? S 02:29 0:00 (unlinkd)

** in all of the above, I selected only those portions that seemed squid
related, to try to keep this somewhat brief.

It seems to tell me (and this is all that it tells me) that squid IS running
... but that squid is running as root on process 598 and as squid on 601 --
could the root process be the one that was terminated?

How would I find -- is there a quick way to find -- where squid is started
by root? (assuming you-all agree that this is happening ...)

And ... when the error message from squid said: "Cannot bind socket FD 33
to *:3128 (98)", would that be the 33u that lsof -i lists?
Received on Thu Dec 09 1999 - 22:44:45 MST