Large cookie causing squid 3.2 to stop processing?

From: Guy Helmer <guy.helmer_at_palisadesystems.com>
Date: Tue, 20 Mar 2012 08:10:46 -0500

I have a user that fairly consistently triggers a lack of response from squid (in intercept mode) when using Facebook. In my first steps in tracking this down this problem, I found that squid stops responding after receiving a request with a huge cookie (some data modified to try preserve privacy, but the length of the data remains correct) extracted as text using Wireshark. Is this sufficient to determine what could be happening, or will it be necessary to get a debugging log?

Thanks in advance,
Guy

GET /profile.php?id=1234567898&__a=22&ajaxpipe=1&ajaxpipe_token=AXiMkChrLmXntr5N&quickling[version]=525558%3B0&__user=1234567898 HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Referer: http://www.facebook.com/
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Accept-Encoding: gzip, deflate
Host: www.facebook.com
Connection: Keep-Alive
Cookie: datr=agbdcydQeefWg9g3igjHkilwlg..; lu=agbtcCdGeifAgwhNiDjukGlg; gz=1; c_user=1234567898; xs=60%3AasbQc3dhePfAgQ%3A0%3A1234567893; x-referer=http%3A%2F%2Fwww.facebook.com%2Faa.b.ccccc%23%2F; act=1234567890983%2F28%3A2; p=7; presence=EM332202131EuserFA12345678878A2EabcdeFDsb2F0Et2F_5b_5dElm2FnullEuct2F1234567895BEtrFnullEtwF1234567899G312345678925H0EblcF0EsndF1CEchFDp_5f1414193878F4CC; sub=1; _e_1EgW_13=%5B%221EgW%22%2C1234567895306%2C%22act%22%2C1234567895305%2C21%2C%22-%22%2C%22vpv%22%2C%22-%22%2C%22home_stream%22%2C%22r%22%2C%22%2F%22%2C%7B%22ft%22%3A%7B%22qid%22%3A%221234567897014918806%22%2C%22mf_story_key%22%3A%22-1234567896193450796%22%2C%22c%22%3A%22m%22%2C%22evt%22%3A51%7D%2C%22gt%22%3A%7B%22ref%22%3A%22nf%22%7D%7D%2C0%2C0%2C0%2C0%2C16%5D; _e_1EgW_14=%5B%221EgW%22%2C1234567895309%2C%22act%22%2C1234567895309%2C22%2C%22-%22%2C%22vpv%22%2C%22-%22%2C%22home_stream%22%2C%22r%22%2C%22%2F%22%2C%7B%22ft%22%3A%7B%22qid%22%3A%221234567897014918806%22%2C%22mf_story_key%22%3A%2212345678999809192%22%2C%22c%22%3A%22m%22%2C%22evt%22%3A51%7D%2C%22gt%22%3A%7B%22ref%22%3A%22nf%22%7D%7D%2C0%2C0%2C0%2C0%2C16%5D; _e_1EgW_15=%5B%221EgW%22%2C1234567895313%2C%22act%22%2C1234567895312%2C23%2C%22-%22%2C%22vpv%22%2C%22-%22%2C%22home_stream%22%2C%22r%22%2C%22%2F%22%2C%7B%22ft%22%3A%7B%22qid%22%3A%221234567897014918806%22%2C%22mf_story_key%22%3A%22123456789600239679%22%2C%22c%22%3A%22m%22%2C%22evt%22%3A51%7D%2C%22gt%22%3A%7B%22type%22%3A%22click2canvas%22%2C%22ref%22%3A%22nf%22%7D%7D%2C0%2C0%2C0%2C0%2C16%5D; _e_1EgW_16=%5B%221EgW%22%2C1234567895316%2C%22act%22%2C1234567895316%2C24%2C%22-%22%2C%22vpv%22%2C%22-%22%2C%22home_stream%22%2C%22r%22%2C%22%2F%22%2C%7B%22ft%22%3A%7B%22qid%22%3A%22123456789014918806%22%2C%22mf_story_key%22%3A%221234567898432214748%22%2C%22c%22%3A%22m%22%2C%22evt%22%3A51%7D%2C%22gt%22%3A%7B%22ref%22%3A%22nf%22%7D%7D%2C0%2C0%2C0%2C0%2C16%5D; _e_1EgW_17=%5B%221EgW%22%2C12345678926875%2C%22act%22%2C1234567896874%2C25%2C%22http%3A%2F%2Fwww.facebook.com%2Faa.b.cccccc%22%2C%22himp%22%2C%22-%22%2C%22home_stream%22%2C%22r%22%2C%22%2F%22%2C%7B%22ft%22%3A%7B%22qid%22%3A%22123456789014918806%22%2C%22mf_story_key%22%3A%221234567899809192%22%2C%22c%22%3A%22m%22%2C%22evt%22%3A39%7D%2C%22gt%22%3A%7B%22ref%22%3A%22nf%22%7D%7D%2C0%2C0%2C0%2C0%2C16%5D; _e_1EgW_18=%5B%221EgW%22%2C123456789026%2C%22act%22%2C123456789025%2C26%2C%22http%3A%2F%2Fwww.facebook.com%2Faa.b.ccccc%22%2C%22click%22%2C%22click%22%2C%22home_stream%22%2C%22r%22%2C%22%2F%22%2C%7B%22ft%22%3A%7B%22qid%22%3A%22123456789014918806%22%2C%22mf_story_key%22%3A%2212345678999809192%22%2C%22c%22%3A%22m%22%7D%2C%22gt%22%3A%7B%22ref%22%3A%22nf%22%7D%7D%2C354%2C1233%2C0%2C981%2C16%5D; _e_1EgW_19=%5B%221EgW%22%2C1234567893986%2C%22act%22%2C1234567890983%2C28%2C%22http%3A%2F%2Fwww.facebook.com%2Fprofile.php%3Fid%3D1234567898%22%2C%22click%22%2C%22click%22%2C%22welcome_box%22%2C%22r%22%2C%22%2F%22%2C%7B%22ft%22%3A%7B%7D%2C%22gt%22%3A%7B%7D%7D%2C151%2C76%2C0%2C981%2C16%5D

--------
This message has been scanned by ComplianceSafe, powered by Palisade's PacketSure.
Received on Tue Mar 20 2012 - 13:11:03 MDT

This archive was generated by hypermail 2.2.0 : Tue Mar 20 2012 - 12:00:07 MDT