Re: [squid-users] New exploit? Two squid proxies simultaneously spike to 99 percent CPU utilization.

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Tue, 12 Oct 2004 14:06:17 +0200 (CEST)

On Tue, 12 Oct 2004, Spam wrote:

> In fact, if it had indeed been this, then it could have been traced
> through the logs as x-mime/messenger requests are logged.
>
> The other strange thing I noticed about this is that the network
> utilization didn't really go up.

If the bug is the half_closed_clients related one then network utilization
should not go up I thin. It is probablu just Squid getting confused about
the state of a client connection and frenetically trying to read data from
the client. In fact I suspect there probably won't be a single byte of
network activity during this period.

It should not seriously affect performance unless there builds up very
many of these "confused" connections causing Squid to run a bit short on
filedescriptors.

But all this is speculation until the bug is fully identified and reliably
reproduceable in controlled manners..

Regards
Henrik
Received on Tue Oct 12 2004 - 06:06:20 MDT

This archive was generated by hypermail pre-2.1.9 : Mon Nov 01 2004 - 12:00:02 MST