Lukas Tribus said the following on 02/18/2014 03:43 PM: > Hi, > > >> Feb 18 14:46:02 localhost haproxy[23414]: 10.46.10.145:58871 >> [18/Feb/2014:14:46:02.454] example.dk .dk/<NOSRV> -1/-1/31 212 cR >> 2/2/0/0/0 0/0 >> Feb 18 14:46:02 localhost haproxy[23414]: 10.46.10.145:58872 >> [18/Feb/2014:14:46:02.455] example.dk .dk/<NOSRV> -1/-1/30 212 cR >> 1/1/0/0/0 0/0 > > > cR means [1]: >> The "timeout http-request" stroke before the client sent a full HTTP >> request. This is sometimes caused by too large TCP MSS values on the >> client side for PPPoE networks which cannot transport full-sized >> packets, or by clients sending requests by hand and not typing fast >> enough, or forgetting to enter the empty line at the end of the >> request. The HTTP status code is likely a 408 here. > > Does your tcpdump confirm this? >
What would I look for in the tcpdump? it's a vmware virtualserver with standard MTU and all.. no PPPoE or anything. I can reproduce it by pressing f5 (a few times in a row) in my browser (firefox) and IE. I cannot reproduce it in chromium. -- Regards, Klavs Klavsen, GSEC - [email protected] - http://www.vsen.dk - Tlf. 61281200 "Those who do not understand Unix are condemned to reinvent it, poorly." --Henry Spencer
