strange behaviour (squid)

From: Brian <signal@dont-contact.us>
Date: Fri, 25 Jun 1999 11:45:08 -0500 (CDT)

I have all traffic going transparently to our squid box, which is running
2.2.P3 on a linux 2.2.7 system with about 12GB space and 512MB memory.

For some reason, it will work for me, but after a while, it locks me out,
I can't hit web requests. I tail the access log and see others doing
fine, but I get no where.

My ip is 208.206.76.49, here is what netstat shows:

[root@constellation logs]# netstat -n|grep 208.206.76.49
tcp 0 0 205.188.147.53:3128 208.206.76.49:2132 SYN_RECV
tcp 0 0 198.206.134.33:3128 208.206.76.49:2133 SYN_RECV
tcp 0 0 198.206.134.33:3128 208.206.76.49:2134 SYN_RECV
tcp 0 0 198.206.134.33:3128 208.206.76.49:2135 SYN_RECV
tcp 0 0 152.163.210.7:3128 208.206.76.49:2136 SYN_RECV
tcp 0 0 208.206.76.6:3128 208.206.76.49:2138 SYN_RECV
tcp 0 0 198.206.134.33:3128 208.206.76.49:2139 SYN_RECV
tcp 0 0 208.206.76.6:3128 208.206.76.49:2142 SYN_RECV
tcp 0 574 208.206.76.44:23 208.206.76.49:2094 ESTABLISHED

and tcpdump

[root@constellation signal]# /usr/sbin/tcpdump src 208.206.76.49
tcpdump: listening on eth0
11:43:10.164316 cluebox.shreve.net.2148 > secure.shreve.net.http: S
3531924797:3531924797(0) win 32120 <mss 1460,sackOK,timestamp 56535384[|tcp]> (DF)
11:43:13.159412 cluebox.shreve.net.2148 > secure.shreve.net.http: S
3531924797:3531924797(0) win 32120 <mss 1460,sackOK,timestamp 56535684[|tcp]> (DF)
11:43:19.153695 cluebox.shreve.net.2148 > secure.shreve.net.http: S
3531924797:3531924797(0) win 32120 <mss 1460,sackOK,timestamp 56536284[|tcp]> (DF)
11:43:22.485389 cluebox.shreve.net.2149 > www9.yahoo.com.http: S
3536978863:3536978863(0) win 32120 <mss 1460,sackOK,timestamp 56536617[|tcp]> (DF)
11:43:24.147116 arp reply cluebox.shreve.net is-at 0:a0:cc:40:64:c1
11:43:25.477659 cluebox.shreve.net.2149 > www9.yahoo.com.http: S
3536978863:3536978863(0) win 32120 <mss 1460,sackOK,timestamp 56536917[|tcp]> (DF)
11:43:31.471942 cluebox.shreve.net.2149 > www9.yahoo.com.http: S
3536978863:3536978863(0) win 32120 <mss 1460,sackOK,timestamp 56537517[|tcp]> (DF)

Does anyone have any idea what this could be?

-----------------------------------------------------
Brian Feeny (BF304) signal@shreve.net
318-222-2638 x 109 http://www.shreve.net/~signal
Network Administrator ShreveNet Inc. (ASN 11881)
Received on Fri Jun 25 1999 - 10:34:04 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:47:00 MST