Re: [squid-users] Squid floods and kills router

On Thursday 19 June 2003 23.24, Andrius Kr wrote:

> If someone from remote LAN starts to browser network Squid
> floods ROUTER1 with a high volume TCP packets (10000 in 5 seconds)
> sized ~62 bytes. Router is old Motorola Vanguard hardware router
> and from such spike its TCP/IP stack is killed, only low-level
> protocols like ARP, LLC, ir UDP based ones - DHCP, NetBIOS-NS,
> NT-BROWSER a able to pass ROUTER1 through in both directions.

Never seen Squid cause anything like this before in the 7 years I have
been working with Squid.

What does the packets look like?

  source/destination
  source/destination ports
  a single TCP stream, or many TCP streams?
  window sizes

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com