[squid-users] wrong source address in access.log. bugzilla id # 433

From: Koch, Steve <skoch@dont-contact.us>
Date: Fri, 25 Oct 2002 12:05:23 -0400

When I upgraded from Squid 2.4 STABLE4 to STABLE7 I noticed a problem with my logging. I'm now running 2.5 STABLE1 and I'm having the same problem. My OS is FreeBSD 4.2. Once and a while (quite frequently actually) I will notice that the source address in the access.log for a particular log entry will be that of a recently browsed destination address. Here's an example:

1035560006.443 118 xp1700 TCP_MISS/200 987 GET http://ad.doubleclick.net/adi/abt.health/health_cancer;svc=;site=cancer;sbj=pid186;kw=;chan=health;syn=about;pos=hslot1;sz=336x280;ord=10.3312197703475144 - DIRECT/206.65.183.80 text/html

Certainly ad.doubleclick.net isn't one of the hosts on my lan. I have log_fqdn on. Henrik responsed in bugzilla stating that something may be fishy with the fqdn cache. Is anybody else experiencing this? If so, is there a fix? Thanks.

Steve
Received on Fri Oct 25 2002 - 10:05:24 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:10:55 MST