Re: [squid-users] Squid and ISA/ Viruswall

Yohoo!
> > And I recognized, that this is the case.
> > My Squid send a "FIN" Packet to the upstream, then a "FIN" Packet to the
> > Clientbrowser and receives a "FIN" PAcket from my Browser. He doesn't
> > receive a "FIN" Packet from the upstream.
> Was there any clues in cache.log, or was this silent?
For what shoul I look? It seems to be silent. For mee there's no clue...
:-(

>
> If not the next step is to run the same test with "squid -k debug" enabled
> to make Squid log verbosely what it is up to doing.

Here's the copy of the debug cache.log at time, when the requests
aborts. If you need more or other parts, let me know.
------------------snip-----------------------------
004/09/15 13:35:28| clientSendMoreData: http://ftp.gwdg.de/pub/linux/knoppix/KN
OPPIX_V3.6-2004-08-16-DE.iso, 4096 bytes
2004/09/15 13:35:28| clientSendMoreData: FD 10
'http://ftp.gwdg.de/pub/linux/kno
ppix/KNOPPIX_V3.6-2004-08-16-DE.iso', out.offset=419674509
2004/09/15 13:35:28| comm_write: FD 10: sz 4096: hndl 0x805d660: data
0x92211d0.
2004/09/15 13:35:28| cbdataLock: 0x92211d0
2004/09/15 13:35:28| commSetSelect: FD 10 type 2
2004/09/15 13:35:28| cbdataUnlock: 0x9225f00
2004/09/15 13:35:28| cbdataUnlock: 0x92211d0
2004/09/15 13:35:28| comm_poll: FD 17 ready for reading
2004/09/15 13:35:28| clientReadRequest: FD 17: reading request...
2004/09/15 13:35:28| commSetSelect: FD 17 type 1
2004/09/15 13:35:28| clientReadRequest: FD 17 closed?
2004/09/15 13:35:28| comm_poll: FD 18 ready for reading
2004/09/15 13:35:28| clientReadRequest: FD 18: reading request...
2004/09/15 13:35:28| commSetSelect: FD 18 type 1
2004/09/15 13:35:28| clientReadRequest: FD 18 closed?
2004/09/15 13:35:28| comm_poll: FD 22 ready for writing
2004/09/15 13:35:28| commHandleWrite: FD 22: off 0, sz 4096.
2004/09/15 13:35:28| commHandleWrite: write() returns 4096
2004/09/15 13:35:28| cbdataValid: 0x98cc208
2004/09/15 13:35:28| clientWriteComplete: FD 22, sz 4096, err 0, off
26565724, l2004/09/15 13:35:28| storeClientCopy:
B3F1BFD3C131C48726CB14947F0869F1, seen 265
65724, want 26565724, size 4096, cb 0x805cff0, cbdata 0x98cc208
2004/09/15 13:35:28| cbdataLock: 0x93edc38
2004/09/15 13:35:28| storeClientCopy2: B3F1BFD3C131C48726CB14947F0869F1
2004/09/15 13:35:28| storeClientCopy3: Copying from memory
2004/09/15 13:35:28| memCopy: offset 26565724: size 4096
2004/09/15 13:35:28| cbdataValid: 0x98cc208
2004/09/15 13:35:28| clientSendMoreData:
http://ftp.gwdg.de/pub/linux/debian/deb
ian-cd/images/current/i386/debian-30r2-i386-binary-7.iso, 4096 bytes
2004/09/15 13:35:28| clientSendMoreData: FD 22
'http://ftp.gwdg.de/pub/linux/deb
ian/debian-cd/images/current/i386/debian-30r2-i386-binary-7.iso',
out.offset=265
65724
2004/09/15 13:35:28| comm_write: FD 22: sz 4096: hndl 0x805d660: data
0x98cc208.
2004/09/15 13:35:28| cbdataLock: 0x98cc208
2004/09/15 13:35:28| commSetSelect: FD 22 type 2
-----------------------snip-------------

> Do your Squid have any thirt party patches applied?
As I already wrote: not known, perhaps from RedHat, but I don't think
so.

> While you are doing this please send the access.log entry to me, including
> all the mime headers and no obfuscation.
Here it is, now for the try to download a debian image:
-----------------snip-----------------
1095246086.832 184120 10.127.2.126 TCP_MISS/200 119156 GET
http://ftp.gwdg.de/pub/linux/debian/debian-cd/images/current/i386/debian-30r2-i386-binary-1_NONUS.iso - DEFAULT_PARENT/10.254.15.1 application/octet-stream [Host: ftp.gwdg.de\r\nUser-Agent: Mozilla/5.0 (X11; U; Linux i686; de-AT; rv:1.4.2) Gecko/20040220\r\nAccept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,video/x-mng,image/png,image/jpeg,image/gif;q=0.2,*/*;q=0.1\r\nAccept-Language: de,de-at;q=0.9,de-de;q=0.8,de-li;q=0.6,de-lu;q=0.5,de-ch;q=0.4,en;q=0.3,en-us;q=0.1\r\nAccept-Encoding: gzip,deflate\r\nAccept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\nKeep-Alive: 300\r\nProxy-Connection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n] [HTTP/1.1 200 OK\r\nVia: 1.1 MSISA3\r\nConnection: Keep-Alive\r\nProxy-Connection: Keep-Alive\r\nContent-Length: 680689664\r\nDate: Wed, 15 Sep 2004 10:58:22 GMT\r\nContent-Type: application/octet-stream\r\nServer: Apache/1.3.27 (Linux/SuSE) PHP/4.3.1 mod_perl/1.27\r\nLast-Modified: Sat, 06 Dec 2003 11:12:46 GMT\r\nETag: "1708039-28928000-3fd1b9ae"\r\nAccept-Ranges: bytes\r\n\r]
----------------snip---------------------

Sorry, my knowledge isn't good enough for checking the debug log for
errors- can you help me?
Received on Thu Sep 16 2004 - 03:32:54 MDT