> Hi John,
>
> As Amos mentioned, it would be great to see http payload of the
> packets (use - Afnn switches for this). Also traffic on proxy itself is more interesting.
> IIRC, 502 status code means that your proxy has some issues when
> reading data from origin server. Do you see anything suspicious in cache.log?
>
> Best wishes,
> Pavel
Hi Pavel,
Nothing in the cache.log, I can run in debug mode, which debug section do you require?
Also here is an example when it is not working with the extra switches:
# tcpdump -Afnn -i eth0 dst 66.151.79.155
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
09:04:32.116091 IP 192.168.1.25.46211 > 66.151.79.155.80: S 4039121358:403912135 E..<f.@.@.......B.O....P.......................
.#..........
09:04:32.318700 IP 192.168.1.25.46211 > 66.151.79.155.80: . ack 286216074 win 23 ....B.O....P......O............
.#......
09:04:32.319875 IP 192.168.1.25.46211 > 66.151.79.155.80: P 0:670(670) ack 1 win E...f.@.@.}n....B.O....P......O......q.....
.#......POST /scripts/mms.dll/JAWS/MMS
09:04:32.320134 IP 192.168.1.25.46211 > 66.151.79.155.80: P 670:745(75) ack 1 wi E...f.@.@.......B.O....P...m..O.....a......
.#......as_userid=asamuels&as_dbpass=a
09:04:32.550586 IP 192.168.1.25.46211 > 66.151.79.155.80: . ack 327 win 27 <nop, E..4f.@.@..
....B.O....P......P.....r......
.#....
.
09:04:32.686331 IP 192.168.1.25.46211 > 66.151.79.155.80: P 745:1431(686) ack 32 E...f.@.@.}[....B.O....P......P.....@......
.#.F..
.GET /scripts/mms.dll/JAWS/MMS/
# tcpdump -Afnn -i eth0 src 66.151.79.155
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
09:04:32.318666 IP 66.151.79.155.80 > 192.168.1.25.46211: S 286216073:286216073( E..@_7..j...B.O......P....O.......@..Q.....d.......
............
09:04:32.522998 IP 66.151.79.155.80 > 192.168.1.25.46211: . ack 746 win 64790 <n E..4_8@.j.].B.O......P....O.........x......
..
..#..
09:04:32.550562 IP 66.151.79.155.80 > 192.168.1.25.46211: P 1:327(326) ack 746 w .....C@.j.\GB.O......P....O..........
..
..#..HTTP/1.1 200 OK
Server: Jagua
09:04:32.897232 IP 66.151.79.155.80 > 192.168.1.25.46211: R 327:327(0) ack 1432 E..(_E@.j.].B.O......P....P....fP...5.........
Cheers, John
Received on Wed Oct 09 2013 - 23:16:04 MDT
This archive was generated by hypermail 2.2.0 : Fri Oct 11 2013 - 12:00:04 MDT