assertion failed: comm.cc:572: "fdc_table[fd].active == 1"

[Sergiy Matrunchyk]

$ squid3 -v
Squid Cache: Version 3.0.STABLE19
configure options: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--libexecdir=${prefix}/lib/squid3' '--disable-maintainer-mode' '--disable-dependency-tracking' '--disable-silent-rules' '--srcdir=.' '--datadir=/usr/share/squid3' '--sysconfdir=/etc/squid3' '--mandir=/usr/share/man' '--with-cppunit-basedir=/usr' '--enable-inline' '--enable-async-io=8' '--enable-storeio=ufs,aufs,diskd,null' '--enable-removal-policies=lru,heap' '--enable-delay-pools' '--enable-cache-digests' '--enable-underscores' '--enable-icap-client' '--enable-follow-x-forwarded-for' '--enable-auth=basic,digest,ntlm,negotiate' '--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,getpwnam,multi-domain-NTLM' '--enable-ntlm-auth-helpers=SMB' '--enable-digest-auth-helpers=ldap,password' '--enable-negotiate-auth-helpers=squid_kerb_auth' '--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group' '--enable-arp-acl' '--enable-snmp' '--with-filedescriptors=65536' '--with-large-files' '--with-default-user=proxy' '--enable-epoll' '--enable-linux-netfilter' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -g -Wall -O2' 'LDFLAGS=-Wl,-Bsymbolic-functions' 'CPPFLAGS=' 'CXXFLAGS=-g -O2 -g -Wall -O2' 'FFLAGS=-g -O2'

$ uname -r
2.6.32-24-server

$ lsb_release -a
Distributor ID: Ubuntu
Description: Ubuntu 10.04.2 LTS
Release: 10.04
Codename: lucid

$ tail -f /var/log/squid/cache.log
2011/07/05 14:51:27| Processing Configuration File: /etc/squid3/squid.conf (depth 0)
2011/07/05 14:51:27| WARNING: use of 'override-lastmod' in 'refresh_pattern' violates HTTP
2011/07/05 14:51:27| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2011/07/05 14:51:27| WARNING: HTTP requires the use of Via
2011/07/05 14:51:27| DNS Socket created at 0.0.0.0, port 34191, FD 10
2011/07/05 14:51:27| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2011/07/05 14:51:27| helperOpenServers: Starting 40/40 'squidGuard' processes
2011/07/05 14:51:28| helperOpenServers: Starting 20/20 'ntlm_auth' processes
2011/07/05 14:51:28| helperOpenServers: Starting 20/20 'ntlm_auth' processes
2011/07/05 14:51:28| helperOpenServers: Starting 10/10 'wbinfo_group_bsd.pl' processes
2011/07/05 14:51:29| Accepting HTTP connections at 0.0.0.0, port 3128, FD 96.
2011/07/05 14:51:29| Accepting ICP messages at 0.0.0.0, port 3130, FD 248.
2011/07/05 14:51:29| HTCP Disabled.
2011/07/05 14:51:29| Configuring Sibling 10.1.32.5/3128/3130
2011/07/05 14:51:29| Configuring Parent 127.0.0.1/8080/0
2011/07/05 14:51:29| Loaded Icons.
2011/07/05 14:51:29| Ready to serve requests.
2011/07/05 14:51:29| assertion failed: comm.cc:572: "fdc_table[fd].active == 1"
2011/07/05 14:51:32| Starting Squid Cache version 3.0.STABLE19 for x86_64-pc-linux-gnu...
2011/07/05 14:51:32| Process ID 10141
2011/07/05 14:51:32| With 65535 file descriptors available
2011/07/05 14:51:32| DNS Socket created at 0.0.0.0, port 53808, FD 8

$ grep "assertion failed:" /var/log/squid3/cache.log
2011/07/05 08:57:30| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 09:03:46| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 09:09:54| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 09:16:02| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 09:22:08| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 09:28:19| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 09:34:28| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 09:40:34| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 09:46:41| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 09:47:48| assertion failed: comm.cc:572: "fdc_table[fd].active == 1"
2011/07/05 09:53:55| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:00:11| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:06:23| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:12:30| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:18:37| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:24:43| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:30:50| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:37:01| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:43:08| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:49:16| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 10:55:23| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 11:01:29| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 11:07:36| assertion failed: ACLChecklist.cc:266: "conn() != NULL"
2011/07/05 11:13:42| assertion failed: ACLChecklist.cc:266: "conn() != NULL"

$ cat /etc/squid3/squid.conf
debug_options ALL,1
http_port 3128
icp_port 3130
visible_hostname proxy.example.org
dead_peer_timeout 10 seconds
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_dir ufs /var/spool/squid3/ 5000 16 256
cache_mem 256 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 8 KB
cache_replacement_policy lru
memory_replacement_policy lru
log_ip_on_direct on
refresh_pattern -i \.jpg$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.gif$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.tiff$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.swf$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.jpeg$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.png$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.mid$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.doc$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.xls$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.ppt$ 14400 100% 43200 reload-into-ims override-lastmod
refresh_pattern -i \.pdf$ 14400 100% 43200 reload-into-ims override-lastmod
ftp_user anonymouse@
half_closed_clients on
pconn_timeout 120 seconds
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param ntlm children 20
auth_param basic children 20
auth_param basic realm Squid cache
auth_param basic credentialsttl 2 hours
external_acl_type ads_group ttl=86400 negative_ttl=3600 children=10 concurrency=80 %LOGIN /usr/lib/squid3/wbinfo_group_bsd.pl
acl ads_inetTormoz external ads_group AB1
acl ads_inetMedium external ads_group AB2
acl ads_inetSpeedy external ads_group AB3
acl ads_im_users external ads_group AB4
acl ads_admins external ads_group AB6
acl ads_clientbank external ads_group AB7
acl ads_ftpusers external ads_group AB8
acl ads_allowall external ads_group AB9
acl ads_allowbigfiles external ads_group AB10

acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl local_net src 127.0.0.1/32
acl local_net src 10.1.32.0/24
acl cachemgr proto cache_object
acl webserver src 127.0.0.1/32
acl allow_dom dstdomain .example.com
acl icq_dom dstdomain .icq.com .aol.com
acl icq_net dst 64.12.0.0/16 205.188.0.0/16
acl icq_port port 443 536 5190
acl clientbank_proto proto HTTP
acl SSL_ports port 443 563 5353
acl Safe_ports port 80 21 443
acl additional_ports port 11371 6969 681 9418 2083 6667 9090 81
acl all_ports port 1-65535
acl HTTP_ports port 80
acl HTTPS_proto proto HTTPS
acl allowed_ports port 443 80
acl FTP_proto proto FTP
acl clientbank_port port 8811 5353
acl gmail_dom dstdomain .gmail.com .google.com .google.com.ua
acl gmail_hosts dst 72.14.205.83/32
acl gmail_hosts dst 72.14.205.17/32
acl gmail_hosts dst 72.14.205.18/32
acl gmail_hosts dst 72.14.205.19/32
acl gmail_hosts dst 64.233.161.83/32
acl gmail_hosts dst 64.233.171.83/32
acl gmail_hosts dst 72.14.253.83/32
acl yahoo_dom dstdomain .yahoo.com
acl banking_dom dstdomain .swedbank.ua
acl yahoo_hosts dst 209.191.92.114/32
acl yahoo_hosts dst 69.147.112.160/32
acl clientbank_ip dst 193.19.108.14/32 91.198.1.40/32
acl direct_me dstdomain 10.1.32.0/24 .liga.net .ubuntu.com .launchpad.net .yahoo.com .google.com .google.com.ua .rbc.ru .microsoft.com .windowsupdate.com .clamav.net .bluehost.com irc.freenode.net
acl dontcache dstdomain .gmail.com ## you'll get some nasty hashsum errors if you cache ubuntu files
acl EXAMPLE proxy_auth REQUIRED
acl CONNECT method CONNECT
acl PURGE method PURGE
acl icp_peers src 10.1.32.5
reply_body_max_size 200 MB all !ads_allowbigfiles !ads_admins
http_access allow PURGE localhost
http_access deny PURGE
http_access allow cachemgr localhost
http_access deny cachemgr
http_access allow gmail_dom SSL_ports
http_access allow gmail_hosts SSL_ports
http_access allow yahoo_dom SSL_ports
http_access allow yahoo_hosts SSL_ports
http_access allow banking_dom SSL_ports
http_access allow ads_im_users icq_dom icq_net icq_port HTTPS_proto CONNECT
http_access deny !ads_im_users icq_dom icq_net
http_access allow ads_allowall all_ports
http_access deny !ads_allowall HTTPS_proto HTTP_ports CONNECT
# http_access allow ads_gtalk gtalk_port gtalk_dom gtalk_net
# http_access deny !ads_gtalk gtalk_port gtalk_dom gtalk_net
http_access allow ads_clientbank clientbank_ip clientbank_port clientbank_proto
http_access deny !ads_clientbank clientbank_ip clientbank_port
http_access allow ads_ftpusers FTP_proto
http_access deny !ads_ftpusers FTP_proto
# http_access allow ads_torrentusers TORRENT_ports
# http_access deny !ads_torrentusers TORRENT_ports
# http_access allow ads_allowradio radio_ports
# http_access deny !ads_allowradio radio_ports
http_access allow ads_inetSpeedy allowed_ports
http_access allow ads_inetMedium allowed_ports
http_access allow ads_inetTormoz allowed_ports
# http_access allow ads_ow_time owtime_inet
# http_access deny ads_ow_time !owtime_inet
http_access allow additional_ports ads_admins
http_access deny additional_ports !ads_admins
http_access deny CONNECT !SSL_ports
http_access deny !SSL_ports !Safe_ports
http_access deny all
icp_access allow icp_peers
icp_access deny all
always_direct allow direct_me
always_direct allow ads_allowall
always_direct allow FTP_proto
always_direct allow icq_dom
always_direct allow icq_net
always_direct allow allow_dom
never_direct deny allow_dom
never_direct allow all
no_cache deny dontcache
no_cache deny ads_allowall
no_cache deny icq_dom
no_cache deny icq_net
no_cache deny FTP_proto
mail_from <email address hidden>
client_persistent_connections on
server_persistent_connections on
detect_broken_pconn on
cache_effective_user proxy
cache_access_log /var/log/squid3/access.log
cache_mgr <email address hidden>
cachemgr_passwd 123456 all
url_rewrite_program /usr/bin/squidGuard -c /etc/squid3/squidGuard.conf
url_rewrite_children 40
url_rewrite_bypass on
via off
delay_pools 3
delay_class 1 2
delay_class 2 2
delay_class 3 3
delay_access 1 allow ads_inetTormoz
delay_access 1 deny all
delay_access 2 allow ads_inetMedium
delay_access 2 deny all
delay_access 3 allow ads_inetSpeedy
delay_access 3 deny all
delay_parameters 1 64000/64000 32000/32000
delay_parameters 2 256000/256000 128000/128000
delay_parameters 3 2024000/2024000 -1/-1 1024000/1024000
cache_peer 10.1.32.5 sibling 3128 3130 background-ping no-digest
cache_peer 127.0.0.1 parent 8080 0 no-query no-digest no-netdb-exchange default
error_directory /usr/share/squid3/errors/ru-ru/
forwarded_for off
request_header_access Via deny all
request_header_access X-Forwarded-For deny all

------------
The problem is raised when I've reconfigured Squid. I've changed these lines:

auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param ntlm children 20
auth_param basic children 20
auth_param basic realm Squid cache
auth_param basic credentialsttl 2 hours
external_acl_type ads_group ttl=86400 negative_ttl=3600 children=10 concurrency=80 %LOGIN /usr/lib/squid3/wbinfo_group_bsd.pl

I suppose that increasing values of params "children" and "concurrency" of parameter external_acl_type may cause the problem.

Any sugesstions?

[Clint Byrum (clint-fewbar)]

Hi Сергій Матрунчик , can you perhaps try on a newer version of Ubuntu? I suspect this was an upstream problem and may have been fixed since 2 years ago when 10.04 was released.

[Tiago Stürmer Daitx (tdaitx)]

This seems to have been fixed in an earlier squid release.