Re: [squid-users] ntlm issue with 2.6.STABLE9-20070220

tis 2007-03-06 klockan 15:06 +0100 skrev Lionel Déruaz:

> Everything was working fine up to now except that since the upgrade, i am facing
> some performance issue : the squid usage cpu on the server is high, and the
> cache.log is full of the following message :
>
> [2007/03/05 10:00:37, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
> got NTLMSSP command 3, expected 1

This indicates ntlm_auth got NTLM messages out-of-sequence.

Have seen reports of Firefox occasionally doing this, continuing the
NTLM handshake even if it reopens the connection. But no report besides
yours of it being very frequent.

It's relatively easy to diagnose from a ethereal/wireshark trace +
access.log and cache.log from the same time period..

cache.log tells the time stamp
access.log possible request candidates at that time (TCP_DENIED)
and the ethereal/wireshark network trace to inspect what was really
going on..

Regards
Henrik