Re: [squid-users] Problem accessing internet at specific time.

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Tue, 09 Sep 2008 00:12:08 +1200

Wennie V. Lagmay wrote:
> We are facing a problem that is very unusual, every 5:30am we cannot browse the internet and after 30 minutes around 6:00am everything returns to normal.
>
> We are using squid-2.6 stable 20.running of Fedora Core 8 64bit.
>
> During this period 5:30 to 6:00am I have done the following test from the inside the proxy server:
> 1. ping outside and inside connection = ok
> 2. check if squid is running and clients are connected using netstat = ok
> 3. check the access = nothing is unusual
> 4. check cache log = nothing is unusual
>
> Does anybody encounter the problem? Is there an option inside the squid configuration the disabled the access on a specific time?
>

Could be a time based ACL or log rotation blocking or restarting squid,
or something completely weird.

> Please below some of cache.log details:
>
> 2008/09/08 05:38:26| httpReadReply: Request not yet fully sent "GET http://update.intervideo.com/GetMessages.asp?P={20471B27-D702-4FE8-8DEC-0702CC8C0A85}&R=8.0.6.109&L=1033&K=ZCEBB9788F91B70EFA9ACC098E9FC978F690CF08F79DCB7F8CEDCF09F8EDBC7F88E8B971FFEAC&xml=YES&log=1&v=ISUA%205.0&u={F03A19A9-6F18-4AC3-B9AD-C719BCA69E1C}"
> 2008/09/08 05:38:35| httpReadReply: Request not yet fully sent "GET http://update.intervideo.com/Version.asp?format=PLAIN&v=ISUA%205.0&u={3CE5727A-7DFB-4613-82E0-7E9243CDA534}"
> 2008/09/08 05:38:38| httpReadReply: Request not yet fully sent "GET http://update.intervideo.com/GetMessages.asp?P={20471B27-D702-4FE8-8DEC-0702CC8C0A85}&R=8.0.6.109&L=1033&K=ZCEBB9788F91B70EFA9ACC098E9FC978F690CF08F79DCB7F8CEDCF09F8EDBC7F88E8B971FFEAC&xml=YES&log=1&v=ISUA%205.0&u={F03A19A9-6F18-4AC3-B9AD-C719BCA69E1C}"
> 2008/09/08 05:38:48| httpReadReply: Request not yet fully sent "GET http://update.intervideo.com/Version.asp?format=PLAIN&v=ISUA%205.0&u={3CE5727A-7DFB-4613-82E0-7E9243CDA534}"
> 2008/09/08 05:38:50| httpReadReply: Request not yet fully sent "GET http://update.intervideo.com/GetMessages.asp?P={20471B27-D702-4FE8-8DEC-0702CC8C0A85}&R=8.0.6.109&L=1033&K=ZCEBB9788F91B70EFA9ACC098E9FC978F690CF08F79DCB7F8CEDCF09F8EDBC7F88E8B971FFEAC&xml=YES&log=1&v=ISUA%205.0&u={F03A19A9-6F18-4AC3-B9AD-C719BCA69E1C}"
> 2008/09/08 05:38:55| httpReadReply: Excess data from "GET http://chat.ksacol.com:1995/ksacol/p5.gif"
> 2008/09/08 05:38:55| httpReadReply: Excess data from "GET http://chat.ksacol.com:1995/ksacol/p402.gif"
> 2008/09/08 05:38:58| httpReadReply: Request not yet fully sent "GET http://update.intervideo.com/Version.asp?format=PLAIN&v=ISUA%205.0&u={3CE5727A-7DFB-4613-82E0-7E9243CDA534}"
>
> 2008/09/08 05:53:57| httpReadReply: Excess data from "GET http://chat.alhawawi.net:1995/alhawawi/p5.gif"
> 2008/09/08 05:54:01| httpReadReply: Excess data from "GET http://chat.alhawawi.net:1995/alhawawi/p5.gif"
> 2008/09/08 05:54:07| urlParse: Illegal character in hostname 'www.%20documents%20and%20settings'
> 2008/09/08 05:55:14| urlParse: Illegal character in hostname 'www.%20documents%20and%20settings'

Whatever client is sending that requests is severely broken and needs
fixing.

> 2008/09/08 05:56:12| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:12| clientReadRequest: FD 960 (77.64.32.87:64163) Invalid Request
> 2008/09/08 05:56:13| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:13| clientReadRequest: FD 453 (77.64.32.87:64164) Invalid Request
> 2008/09/08 05:56:13| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:13| clientReadRequest: FD 1113 (77.64.32.87:64165) Invalid Request
> 2008/09/08 05:56:13| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:13| clientReadRequest: FD 680 (77.64.32.87:64166) Invalid Request
> 2008/09/08 05:56:13| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:13| clientReadRequest: FD 295 (77.64.32.87:64167) Invalid Request
> 2008/09/08 05:56:13| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:13| clientReadRequest: FD 606 (77.64.32.87:64168) Invalid Request
> 2008/09/08 05:56:13| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:13| clientReadRequest: FD 709 (77.64.32.87:64170) Invalid Request
> 2008/09/08 05:56:13| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:13| clientReadRequest: FD 1282 (77.64.32.87:64171) Invalid Request
> 2008/09/08 05:56:14| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:14| clientReadRequest: FD 782 (77.64.32.87:64173) Invalid Request
> 2008/09/08 05:56:14| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:14| clientReadRequest: FD 506 (77.64.32.87:64174) Invalid Request
> 2008/09/08 05:56:14| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:14| clientReadRequest: FD 883 (77.64.32.87:64175) Invalid Request
> 2008/09/08 05:56:14| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:14| clientReadRequest: FD 556 (77.64.32.87:64176) Invalid Request
> 2008/09/08 05:56:14| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:14| clientReadRequest: FD 113 (77.64.32.87:64177) Invalid Request
> 2008/09/08 05:56:15| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:15| clientReadRequest: FD 114 (77.64.32.87:64178) Invalid Request
> 2008/09/08 05:56:15| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:15| clientReadRequest: FD 355 (77.64.32.87:64179) Invalid Request
> 2008/09/08 05:56:15| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:15| clientReadRequest: FD 931 (77.64.32.87:64180) Invalid Request
> 2008/09/08 05:56:15| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:15| clientReadRequest: FD 114 (77.64.32.87:64184) Invalid Request
> 2008/09/08 05:56:15| parseHttpRequest: Invalid HTTP version
> 2008/09/08 05:56:15| clientReadRequest: FD 332 (77.64.32.87:64191) Invalid Request
>
> Regards,
>
> Wennie
>
>
>
>
>
>
>

-- 
Please use Squid 2.7.STABLE4 or 3.0.STABLE8
Received on Mon Sep 08 2008 - 12:12:47 MDT

This archive was generated by hypermail 2.2.0 : Mon Sep 08 2008 - 12:00:02 MDT