[squid-users] Re: have you ever seen this?

alireza@panaisp.net wrote:

> I am seeing these lines in my cache.log:
>
> 2004/05/21 20:14:13| Config 'request_header_max_size'= 10240 bytes.
> 2004/05/21 20:15:26| Request header is too large (12287 bytes)

> I saw my access.log and find these line on it:
> 217.68.25.212 - - [21/May/2004:20:21:16 +0430] "NONE
> error:request-too-large HTTP/0.0" 413 1592 NONE:NONE

> It likes a DOS attack or a virus, and it use many file descriptor so
> sometimes these lines apear in cache.log
> 2004/05/21 20:23:00| WARNING! Your cache is running out of filedescriptors

> I recompiled my squid with 32768 filedescriptors but the problem still
> exist and it affects the performance very much.

Figure out which system is the source of this (you have the IP in
access.log), block it at the network layer (using your OS's firewall
capabilities), and then track down and deal with the person responsible.

Adam
Received on Fri May 21 2004 - 10:05:02 MDT