Re: [squid-users] NONE_ABORTED in access log and network is slowþ

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Tue, 24 Sep 2013 23:47:47 +1200

On 24/09/2013 11:20 p.m., Nil Nik wrote:
> I am using squid 3.3.9, always getting NONE_ABORTED/000 or TCP_MISS_ABORTED/000. My internal network gets slow after it.
>
> Please help me.
>
> Find the below part of access.log file for details.
> 1380028608.317 172.16.101.85 TCP_MISS/200 433 http://sk.ybinst9.ec.yimg.com/ec/fd/ls/GlinkPing.aspx?
> 1380028608.658 172.16.100.114 NONE_ABORTED/000 0 http://weather.partners.msn.com/data.aspx?

The client disconnected (ABORTED) before it finished sending the HTTP
request. It at least got past the first line of the request or the URL
woudl not show up there, but it did not finish.

> 1380028609.010 172.16.100.248 TCP_MISS/200 363 http://hzmksreiuojy.nl/ldr.php
> 1380028609.010 172.16.100.248 TCP_MISS/200 363 http://hzmksreiuojy.nl/ldr.php
> 1380028610.050 172.16.100.248 TCP_MISS/200 363 http://hzmksreiuojy.nl/ldr.php
> 1380028610.557 172.16.101.92 NONE_ABORTED/000 0 http://www.msftncsi.com/ncsi.txt
> 1380028611.410 172.16.100.246 NONE_ABORTED/000 0 http://cache-download.real.com/free/windows/installer/upgradehelper/xml/v10/rp16/stubinst_config_en.xml?
> 1380028618.606 172.16.101.88 NONE_ABORTED/000 0 http://service.amasvc.com/creative.jsonp?
> 1380028618.680 172.16.101.148 NONE_ABORTED/000 0 http://download368.avast.com/iavs5x/vps_win32-bed-bec.vpx
> 1380028619.261 172.16.101.15 NONE_ABORTED/000 0 http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab?
> 1380028621.043 172.16.100.147 TCP_MISS_ABORTED/000 0 http://su.ff.avast.com/R/A00KIGViOWMxYmZmN2Y1MTQ5MDFhYTdmNDI4YmNlY2Y2ZDMyEgQBIwkTGHgiAf4qBwgEEOH1_BkqBAgDEAAyCggEEOH1_BkYgAo4y4uAQA==

These ones are similar. The client finished sending the request, but
still disconnected before any response coudl be sent to it.

> 1380028621.088 172.16.100.246 TCP_MISS_ABORTED/000 0 http://au.download.windowsupdate.com/msdownload/update/software/secu/2012/06/windows6.1-kb2691442-x86_8729af4a5b25ad97923513c6c48f511924f65e3b.psf
> 1380028624.069 172.16.100.222 NONE_ABORTED/000 0 http://www.msftncsi.com/ncsi.txt
> 1380028626.091 172.16.101.169 TCP_MISS/200 385 http://notify4.dropbox.com/subscribe?

Are those "0" values in yoru log after the status code the time taken
for the transaction (%tt)? if so 0ms shows a very impatient client.

Nothing you can do about the clients disconnecting. They are free to do
that abolutely any time they desire.

Amos
Received on Tue Sep 24 2013 - 11:47:52 MDT

This archive was generated by hypermail 2.2.0 : Tue Sep 24 2013 - 12:00:04 MDT