An "ngrep" of the page load should tell quite easily..
Example of use:
tcpdump -w /path/to/spool/file -s 1600 host ip.of.test.client
[wait for problem to be seen]
tcpdump -r /path/to/spool/file -n 'tcp[13] & 63 = 2' | \
awk '{print $1, $2}'
[gives you a list of all TCP sessions in the dump. The port number
is the last value on each line]
ngrep -I /path/to/spool/file port 32485
[dumps the content of session with port 32485]
Repeat the ngrep until you have found the correct TCP session for the
page contents, then analyze the content of the session to see if it
contains the offending characters, or if these are invented by the
browser.
Regards
Henrik
On Wednesday 20 February 2002 13:02, Robert Collins wrote:
> I've seen the E/U E combined with square boxes with IE from time to
> time, but they've always disappeared when the page finishes
> loading. I'd guess that the page isn't loading /finishing loading
> correctly in this case.
>
> Rob
-- MARA Systems AB, Giving you basic free Squid support Customized solutions, packaged solutions and priority support available on requestReceived on Wed Feb 20 2002 - 06:51:27 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:06:27 MST