Re: [squid-users] Combined log showing 0/0 for status/bytes?

From: Tuc at T-B-O-H.NET <ml_at_t-b-o-h.net>
Date: Sun, 6 Jul 2008 19:10:33 -0400 (EDT)

> On s=C3=B6n, 2008-07-06 at 13:50 -0400, Tuc at T-B-O-H.NET wrote:
> > Hi,
> >=20
> > I'm running "squid/2.6.STABLE20+ICAP" via WCCP2. I seem to be
> > getting more and more instances of :
> >=20
> > 192.168.3.249 - - [05/Jul/2008:19:08:44 -0400] "GET http://photos-c.ak.fa=
> cebook.com/photos-ak-sctm/v43/18/2433486906/app_2_2433486906_3650.gif HTTP/=
> 1.1" 0 0 "http://www.facebook.com/home.php?" "Mozilla/4.0 (compatible; MSIE=
> 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" TCP_HIT:DIREC=
> T
> >=20
> > 192.168.3.249 - - [05/Jul/2008:19:08:44 -0400] "GET http://profile.ak.fac=
> ebook.com/v230/847/104/q748084879_3980.jpg HTTP/1.1" 0 0 "http://www.facebo=
> ok.com/home.php?" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET =
> CLR 1.1.4322; .NET CLR 2.0.50727)" TCP_MISS:DIRECT
> >=20
> >=20
> > 0 status and 0 bytes sent. Is this something that just "happens" ?
> > (193 out of 2909 hits yesterday)
>
> On MISS it's usually when the browser aborts the request before headers
> is known.
>
        Ok.. Don't know if the user is doing that or not...
>
> Not sure what to make out of it on cache hits... but I guess it may be
> that the request was aborted before the RESPMOD response from the ICAP
> server is seen..
>
        ICAP server? Even though its compiled into the system, I don't
have any ICAP enabled :

#Default:
# icap_enable off

valhalla# grep ^icap squid.conf
valhalla#

        (I'm one of those ENABLE EVERYTHING JUST INCASE type of people. ;) )

                Thanks, Tuc
Received on Sun Jul 06 2008 - 23:10:53 MDT

This archive was generated by hypermail 2.2.0 : Mon Jul 07 2008 - 12:00:04 MDT