[squid-users] TCP_MISS/600 Squid 2.6S6 and Dansguardin

Hi,

I haven't been able to solve this issue on my own so I'm writing here
hoping to receive some feedback.

I use a same host squid/dansguardian combination for 5/6.000 active users.

Some of the users are complaining they can't reach a particular web page.

I can reach the page if I don't use the Dansguardian and I see in the
squid logs a TCP_MISS/600 that sounds like something is wrong with the
header. If I try enabling the Dansguardian I receive the page but
without any content.

Here follows extract from logs and header obtained with tcpdump sessions.

Trying host dst.domain.com I'm redirected to the page haveing the
problem: http://dst.domain.com/aaa/bbb.html.

Using only SQUID:

GET /aaa/bbb.html HTTP/1.0
Host: dst.domain.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
AppleWebKit/530.1 (KHTML, like Gecko) Chrome/2.0.169.1 Safari/530.1
Accept:
application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,bzip2,sdch
Accept-Language: it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Via: 1.1 proxy:8080 (squid/2.6.STABLE6)
Cache-Control: max-age=0
Connection: keep-alive

GET /aaa/bbb.html HTTP/1.0
Host: dst.domain.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
AppleWebKit/530.1 (KHTML, like Gecko) Chrome/2.0.169.1 Safari/530.1
Accept: */*
Accept-Encoding: gzip,deflate,bzip2,sdch
Accept-Language: it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Via: 1.1 proxy:8080 (squid/2.6.STABLE6)
Cache-Control: max-age=259200
Connection: keep-alive

squid access.log: 1239278630.760 31 ip_proxy TCP_MISS/600 317 GET
http://dst.domain.com/aaa/bbb.html - DIRECT/IP_dst.domain.com -

Using SQIUD and DANSGUARDIAN:

Host: dst.domain.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
AppleWebKit/530.1 (KHTML, like Gecko) Chrome/2.0.169.1 Safari/530.1
Accept:
application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: identity,gzip,deflate
Accept-Language: it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
X-Forwarded-For: IP_proxy
Via: 1.0 proxy:3128 (squid/2.6.STABLE6)
Cache-Control: max-age=0
Connection: keep-alive

Host: dst.domain.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
AppleWebKit/530.1 (KHTML, like Gecko) Chrome/2.0.169.1 Safari/530.1
Accept: */*
Accept-Encoding: identity,gzip,deflate
Accept-Language: it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
X-Forwarded-For: IP_proxy
Via: 1.0 proxy:3128 (squid/2.6.STABLE6)
Cache-Control: max-age=259200
Connection: keep-alive

squid access.log: 1239278899.250 31 IP_proxy TCP_MISS/600 317 GET
http://dst.domain.com/aaa/bbb.html - DIRECT/IP_dst.domain.com -
dansguardian access.log: 2009.4.9 14:08:19 - IP_proxy
http://dst.domain.com/aaa/bbb.html GET 0 0 1 0 - -
===========

Can anyone help me solving this?

TIA for help.

--
Marco.