Dear all,
I've got squid 2.4 stable 6 on FreeBSD 4.2. It's been running since 2002
without problem, and without changes to the environment (hardware,OS,
etc). The FreeBSD box is a gateway for around 40 -50 concurrent internet
users.
Lately on /var/log/messages squid has exited alot due to signal 6.
running squid -N -d1 I can see many complaints like following:
2004/09/03 19:34:26|comm_accept: FD 8: (53) Software caused connection abort
2004/09/03 19:34:26| httpAccept: FD 8: accept failure: (53) Software
caused connection abort
or sometimes complaints about available buffer space ...(55)
A few days ago Squid process suddenly took up to 85% oc CPU and the
internet was very slow (we are on 2Mb ADSL), looking at netstat -a I saw
multiple http connection on www.nymex.com .... found out that one of the
workstations was infected by a worm called NYXEM, Symantec calls it
W32.Blackmal.mm. I took down the workstation and all went well until
last Friday night (3 Sept, 2004) suddenly the internet sort of froze for
a few minutes until I restarted squid a few times.
What can this be?
How can I debug this?
Anymore information I should provide?
What should I be looking at?
Received on Sat Sep 04 2004 - 18:57:11 MDT
This archive was generated by hypermail pre-2.1.9 : Fri Oct 01 2004 - 12:00:02 MDT