Re: [squid-users] cache.log showing this...

From: Jesus M. Salvo Jr. <jesus.salvo@dont-contact.us>
Date: Tue, 01 Apr 2003 12:28:29 +1000

There's another possible reason for those logs.

In our case, we have 2 SPARC Solaris that have the same public IP
address ( different internal IP address of course ), and the Cisco load
balancer would do a check by sending TCP_SYN to each of them internal IP
addresses that are mapped to that public IP.... but once it receives a
TCP_ACK, the router would send a TCP_RST or TCP_FIN. This will tell the
router that the service on that IP & port is alive. It seem to do this
every minute.

Mike Diggins wrote:

>These are typical on Solaris. Don't know about other platforms though. I
>believe they're caused in part by users aborting requests (i.e. hitting
>the stop button). I get lot's of them.
>
>-Mike
>
>
>On Mon, 31 Mar 2003, Jacobi Michael CRPH wrote:
>
>
>
>>I have been seeing similar things in the last few days (starting on Friday) on my 2.5Stable1-20021231 system (Redhat Linux 6.2, Kernel 2.2.25). One comment though - I have recently upgraded the kernel to 2.2.25 from 2.2.14-7. I was NOT seeing this before I upgraded the kernel!
>>
>>Mike Jacobi
>>
>>
>>-----Original Message-----
>>From: Hector Miranda [mailto:hmiranda@insys-corp.com.mx]
>>Sent: Monday, March 31, 2003 5:30 PM
>>To: 'squid-users@squid-cache.org'
>>Subject: [squid-users] cache.log showing this...
>>
>>
>>Hi fellows...
>>V880, Ultra SPARC III, Solaris 8, Squid 2.5STABLE1
>>Giga Ethernet access to internet, four thousand users behind my proxy and
>>the cache.log shows this over and over again (1 or 2 times per minute):
>>
>> comm_accept: FD 7: (130) Software caused connection abort
>> httpAccept: FD 7: accept failure: (130) Software caused connection abort
>>
>>we thougth there was a problem with the communication speed to the internet,
>>so the Client's Web browser wold abort the connection, but the down and up
>>load rates to the internet on my net are about 100-200 Kb/s (through squid),
>>so this is not the problem... why is this happening??
>>
>>Any ideas?
>>
>>Thanks in advance!
>>
>>.Héctor M.
>>
>>
>>
>
>
> ** *** ****** Mike Diggins
> **** **** ******** Analyst, Networks
> ** ******* ** ** Computing and Information Services
> ** ** ** ** ** McMaster University, Hamilton, Ontario
> ** ** ** ** (905) 525-9140 Ext. 27471 ABB131A
> ** ** ********* Fax: (905) 528-3773
> *** *** ******** Email: diggins@mcmaster.ca
>
>
>
>
>
>

-- 
Jesus M. Salvo Jr.
Mobile Internet Group Pty Ltd
(formerly Softgame International Pty Ltd)
M: +61 409 126699
T: +61 2 94604777
F: +61 2 94603677
PGP Public key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0BA5348
Received on Mon Mar 31 2003 - 19:26:37 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:14:27 MST