Mine says:
1046096606.059 2927 127.0.0.1 TCP_MISS/200 53519 GET
http://www.cfo.com/article/1,5309,8287|14|||,00.html -
DIRECT/64.94.191.3 text/html
Based on your log saying DIRECT/www.cfo.com I can tell you are not using
Squid-2.5. Perhaps upgrading your Squid to a current (and supported on
squid-users) version will help.
Note: If you are using any redirectors then it is possible your problem
is caused indirectly by the redirector. The same also applies to the
anonymiser features of Squid (http_header_access in Squid-2.5, was
another directive in earlier Squid versions).
Some explanation you your log entries:
The first says the URL was forwarded to the web server (TCP_MISS), but
the web server rejected the request giving a "400 Bad request" error
code back to Squid.
The second says that Squid saw another request for the same URL and as
your squid.conf has negative caching of errors enabled it assumed the
error condition is still true and gave this error back as a
TCP_NEGATIVE_HIT..
Regards
Henrik
mån 2003-02-24 klockan 16.04 skrev Mark_Saunders:
> The log entries are as follows:
>
> With logging at default:
> 1046098195.904 60 10.50.1.74 TCP_MISS/400 216 GET
> http://www.cfo.com/channelarchives/0,5509,5|1,00.htm
> l - DIRECT/www.cfo.com text/html
>
> With logging set to 9:
> 1046098629.538 2 10.50.1.74 TCP_NEGATIVE_HIT/400 224 GET
> http://www.cfo.com/printarticle/0,5317,8717|
> ,00.html - NONE/- text/html
>
>
>
> Henrik Nordstrom wrote:
>
> > No problem here, using a vanilla Squid-2.5 with no special configuration
> >
> > What is logged in cache.log when it happens?
> >
> > Regards
> > Henrik
> >
> > mån 2003-02-24 klockan 14.04 skrev Mark_Saunders:
> > > Yes, I'm sure. The example below is accurate.
> > > Here are a few more examples:
> > > http://www.cfo.com/channelarchives/0,5509,5|1,00.html
> > > http://www.cfo.com/emailauthor/1,5328,8820|131,00.html
> > > http://www.cfo.com/articles/most_emailed_articles/0,5638,8717|A|,00.html
> > > http://www.cfo.com/printarticle/0,5317,8717|,00.html
> > >
> > > Henrik Nordstrom wrote:
> > >
> > > > Are you sure there is no space character in the URL?
> > > >
> > > > Regards
> > > > Henrik
> > > >
> > > > fre 2003-02-21 klockan 22.00 skrev Mark_Saunders:
> > > > > I'm using Version 2.3.STABLE4 for outbound web access, and have a
> > > > > problem accessing ONE site.
> > > > > This site uses pipe characters in their urls that cause Squid to return
> > > > > with "Malformed Request" errors.
> > > > > An example URL:
> > > > > http://www.cfo.com/article/1,5309,8287|14|||,00.html
> > > > > I tried the acl no_cache and always_direct options, but this did not
> > > > > resolve the issue.
> > > > > Is there a way to bypass this checking for ONE domain?
> > > > > Thanks!
> > > > >
> > > > > --
> > > > > mv $win /dev/null
> > > > --
> > > > Henrik Nordstrom <hno@squid-cache.org>
> > > > MARA Systems AB, Sweden
> > >
> > > --
> > > mv $win /dev/null
> > --
> > Henrik Nordstrom <hno@squid-cache.org>
> > MARA Systems AB, Sweden
>
> --
> mv $win /dev/null
-- Henrik Nordstrom <hno@squid-cache.org> MARA Systems AB, SwedenReceived on Mon Feb 24 2003 - 08:46:25 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:13:34 MST