Re: [squid-users] Regarding cache messages Short response on port *

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Fri, 09 Mar 2007 00:28:38 +0100

tor 2007-03-08 klockan 12:52 +0545 skrev Tek Bahadur Limbu:

> Every 10-15 seconds, I see an entry like the following:
>
> Short response on port 53738. Expecting 1275 octets more

This message is seen if a server terminates the response early without
sending all it said it will send.

This message should not be logged at level 1.. fixing that so you won't
see it in the logs of later versions. But it would be interesting to
know what server is sending these responses and why it's being cut
short. So if you can please correlate the cache.log messages with
access.log records so the problem can be diagnosed further.

The patch to fix the log message is at
http://www.squid-cache.org/Versions/v2/HEAD/changesets/11314.patch

And if you change it to still be at level (11, 1) you will see the URL
within the message.

Alternatively you can run wireshark/ethereal, and inspect the traffic on
the reported port when seeing the message.

Regards
Henrik

Received on Thu Mar 08 2007 - 16:28:46 MST

This archive was generated by hypermail pre-2.1.9 : Sat Mar 31 2007 - 13:00:01 MDT