Re: [squid-users] TCP_MISS/600 Squid 2.6S6 and Dansguardin

Marco Leone wrote:
> Hi,
>
> I haven't been able to solve this issue on my own so I'm writing here
> hoping to receive some feedback.
>
> I use a same host squid/dansguardian combination for 5/6.000 active users.
>
> Some of the users are complaining they can't reach a particular web page.
>
> I can reach the page if I don't use the Dansguardian and I see in the
> squid logs a TCP_MISS/600 that sounds like something is wrong with the
> header. If I try enabling the Dansguardian I receive the page but
> without any content.
>
> Here follows extract from logs and header obtained with tcpdump sessions.
>
> Trying host dst.domain.com I'm redirected to the page haveing the
> problem: http://dst.domain.com/aaa/bbb.html.
>

600 is a parsing error.

1) try a current squid. 2.6 is deprecated now.

2) check if the request is making it out past Squid and a reply coming
back at all. That way we can restrict the parse problem to either
request or reply headers.

3) raise the parser debug_options and see where its failing.

> Using only SQUID:
>
> GET /aaa/bbb.html HTTP/1.0
> Host: dst.domain.com
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
> AppleWebKit/530.1 (KHTML, like Gecko) Chrome/2.0.169.1 Safari/530.1
> Accept:
> application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
>
> Accept-Encoding: gzip,deflate,bzip2,sdch
> Accept-Language: it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
> Via: 1.1 proxy:8080 (squid/2.6.STABLE6)
> Cache-Control: max-age=0
> Connection: keep-alive
>
> GET /aaa/bbb.html HTTP/1.0
> Host: dst.domain.com
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
> AppleWebKit/530.1 (KHTML, like Gecko) Chrome/2.0.169.1 Safari/530.1
> Accept: */*
> Accept-Encoding: gzip,deflate,bzip2,sdch
> Accept-Language: it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
> Via: 1.1 proxy:8080 (squid/2.6.STABLE6)
> Cache-Control: max-age=259200
> Connection: keep-alive
>
> squid access.log: 1239278630.760 31 ip_proxy TCP_MISS/600 317 GET
> http://dst.domain.com/aaa/bbb.html - DIRECT/IP_dst.domain.com -
>
> Using SQIUD and DANSGUARDIAN:
>
> Host: dst.domain.com
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
> AppleWebKit/530.1 (KHTML, like Gecko) Chrome/2.0.169.1 Safari/530.1
> Accept:
> application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
>
> Accept-Encoding: identity,gzip,deflate
> Accept-Language: it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
> X-Forwarded-For: IP_proxy
> Via: 1.0 proxy:3128 (squid/2.6.STABLE6)
> Cache-Control: max-age=0
> Connection: keep-alive
>
> Host: dst.domain.com
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
> AppleWebKit/530.1 (KHTML, like Gecko) Chrome/2.0.169.1 Safari/530.1
> Accept: */*
> Accept-Encoding: identity,gzip,deflate
> Accept-Language: it-IT,it;q=0.8,en-US;q=0.6,en;q=0.4
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
> X-Forwarded-For: IP_proxy
> Via: 1.0 proxy:3128 (squid/2.6.STABLE6)
> Cache-Control: max-age=259200
> Connection: keep-alive
>
> squid access.log: 1239278899.250 31 IP_proxy TCP_MISS/600 317 GET
> http://dst.domain.com/aaa/bbb.html - DIRECT/IP_dst.domain.com -
> dansguardian access.log: 2009.4.9 14:08:19 - IP_proxy
> http://dst.domain.com/aaa/bbb.html GET 0 0 1 0 - -
> ===========
>
> Can anyone help me solving this?
>
> TIA for help.
>
> --
> Marco.
>

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
   Current Beta Squid 3.1.0.6