Re: [squid-users] This is a attack?

From: huang mingyou <therods@dont-contact.us>
Date: Fri, 27 Oct 2006 20:28:59 +0800

this data just a example.
I have more than 30 squid server. and I sum the all data from them.
if a client at 10:00 am have 1000 request and 10:05 am have 3000 ,then
I can computer that this client have 3000-1000 requests in the 5
minutes.

On 27/10/06, Mark Elsen <mark.elsen@gmail.com> wrote:
> > hello:
> > I use this funtion get the data from squid.
> > getdata(){
> > squidclient -T 5 -h $1 -p 80 cache_object://${1}/client_list
> > 2>/dev/null|grep -e "Address:" -e "\<HTTP Requests\>"|awk
> > 'BEGIN{RS="Address:"}{print $1" -"$4}'
> > }
> >
> > And the data like this. I compare the requests every 5 minutes.
> >
> >
> > Address: 58.211.184.102
> > Name: 58.211.184.102
> > Currently established connections: 0
> > ICP Requests 0
> > HTTP Requests 2
> > TCP_MISS 1 50%
> > TCP_MEM_HIT 1 50%
> >
> >
>
> I can't see the 1000 reqs. in 5 mins. somewhere in that output (?)
>
> M.
>

-- 
Huang Mingyou
Received on Fri Oct 27 2006 - 06:29:03 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Nov 01 2006 - 12:00:05 MST