While working on native Win32 NTLM helper, I have found something of strange in current NTLM support:
When loading a ftp:// URL, Internet Explorer pop-ups to me for authentication for every internal Squid Icons. This seems to happen always after a browser cache clear.
Attached they are access.log and cache.log with log_mime_hdrs on and full helper debug. As you can see, the helper is not called for this auth requests.
Currently I'm using the latest STABLE 3 snapshot merged in nt-2_5 branch with the following patch to avoid challenge reuses because sometimes seems that auth_param ntlm max_challenge_reuses directive is not honored:
Index: ntlm/auth_ntlm.c
===================================================================
RCS file: /cvsroot/squid/squid/src/auth/ntlm/auth_ntlm.c,v
retrieving revision 1.18.2.4
diff -u -p -r1.18.2.4 auth_ntlm.c
--- ntlm/auth_ntlm.c 5 Feb 2003 03:20:35 -0000 1.18.2.4
+++ ntlm/auth_ntlm.c 14 Sep 2003 17:22:10 -0000
@@ -647,7 +647,11 @@ authenticateNTLMChangeChallenge_p(ntlm_h
debug(29, 5) ("authenticateNTLMChangeChallenge_p: first use\n");
return 0;
}
+#if defined(_SQUID_MSWIN_) || defined(_SQUID_CYGWIN_)
+ {
+#else
if (helperstate->challengeuses > ntlmConfig->challengeuses) {
+#endif
debug(29, 4) ("authenticateNTLMChangeChallenge_p: Challenge uses (%d) exceeded max uses (%d)\n", helperstate->challengeuses, ntlmConfig->challengeuses);
return 1;
}
Can be this patch the origin of this or there is some problem on Squid ?
Regards
Guido
- ======================================================== Guido Serassio Acme Consulting S.r.l. Via Gorizia, 69 10136 - Torino - ITALY Tel. : +39.011.3249426 Fax. : +39.011.3293665 Email: [EMAIL PROTECTED] WWW: http://www.acmeconsulting.it/
2003/09/14 19:01:33| Starting Squid Cache version 2.5.STABLE3-NT-CVS for i686-pc-winnt... 2003/09/14 19:01:33| Running as SquidNT Windows System Service on Windows 2000 2003/09/14 19:01:33| Service command line is: 2003/09/14 19:01:33| Process ID 2272 2003/09/14 19:01:33| With 2048 file descriptors available 2003/09/14 19:01:33| With 2048 CRT stdio descriptors available 2003/09/14 19:01:33| Windows sockets initialized 2003/09/14 19:01:33| Performing DNS Tests... 2003/09/14 19:01:33| Successful DNS name lookup tests... 2003/09/14 19:01:33| DNS Socket created at 0.0.0.0, port 2099, FD 4 2003/09/14 19:01:33| Adding nameserver 172.31.128.1 from Registry 2003/09/14 19:01:33| Adding nameserver 172.31.128.5 from Registry 2003/09/14 19:01:33| helperStatefulOpenServers: Starting 5 'ntlm_auth.exe' processes ntlm-auth[2044]: c:/squid/libexec/ntlm_auth.exe build Sep 14 2003, 18:50:49 starting up... ntlm-auth[2044]: SSPI initialized OK ntlm-auth[1568]: c:/squid/libexec/ntlm_auth.exe build Sep 14 2003, 18:50:49 starting up... ntlm-auth[1568]: SSPI initialized OK ntlm-auth[1092]: c:/squid/libexec/ntlm_auth.exe build Sep 14 2003, 18:50:49 starting up... ntlm-auth[1092]: SSPI initialized OK 2003/09/14 19:01:33| helperOpenServers: Starting 2 'nt_auth.exe' processes ntlm-auth[2056]: c:/squid/libexec/ntlm_auth.exe build Sep 14 2003, 18:50:49 starting up... ntlm-auth[2056]: SSPI initialized OK ntlm-auth[456]: c:/squid/libexec/ntlm_auth.exe build Sep 14 2003, 18:50:49 starting up... ntlm-auth[456]: SSPI initialized OK 2003/09/14 19:01:33| helperOpenServers: Starting 2 'win32_check_group.exe' processes 2003/09/14 19:01:33| helperOpenServers: Starting 2 'win32_check_group.exe' processes 2003/09/14 19:01:33| Unlinkd pipe opened on FD 53 2003/09/14 19:01:33| Swap maxSize 393216 KB, estimated 30247 objects 2003/09/14 19:01:33| Target number of buckets: 1512 2003/09/14 19:01:33| Using 8192 Store buckets 2003/09/14 19:01:33| Max Mem size: 32768 KB 2003/09/14 19:01:33| Max Swap size: 393216 KB 2003/09/14 19:01:33| Rebuilding storage in c:/squid/var/cache (CLEAN) 2003/09/14 19:01:33| Using Least Load store dir selection 2003/09/14 19:01:33| Set Current Directory to c:/squid/var/cache 2003/09/14 19:01:33| Loaded Icons. 2003/09/14 19:01:33| Accepting HTTP connections at 0.0.0.0, port 3128, FD 59. 2003/09/14 19:01:33| Accepting ICP messages at 0.0.0.0, port 3130, FD 60. 2003/09/14 19:01:33| HTCP Disabled. 2003/09/14 19:01:33| Accepting SNMP messages on port 3401, FD 61. 2003/09/14 19:01:33| pinger: ICMP socket opened 2003/09/14 19:01:33| pinger: Squid socket opened 2003/09/14 19:01:33| Pinger socket opened on FD 63 2003/09/14 19:01:33| NETDB state reloaded; 960 entries, 171 msec 2003/09/14 19:01:33| Ready to serve requests. 2003/09/14 19:01:33| Store rebuilding is 23.9% complete 2003/09/14 19:01:34| Done reading c:/squid/var/cache swaplog (17149 entries) 2003/09/14 19:01:34| Finished rebuilding storage from disk. 2003/09/14 19:01:34| 17149 Entries scanned 2003/09/14 19:01:34| 0 Invalid entries. 2003/09/14 19:01:34| 0 With invalid flags. 2003/09/14 19:01:34| 17149 Objects loaded. 2003/09/14 19:01:34| 0 Objects expired. 2003/09/14 19:01:34| 0 Objects cancelled. 2003/09/14 19:01:34| 0 Duplicate URLs purged. 2003/09/14 19:01:34| 0 Swapfile clashes avoided. 2003/09/14 19:01:34| Took 0.9 seconds (18620.0 objects/sec). 2003/09/14 19:01:34| Beginning Validation Procedure 2003/09/14 19:01:34| Completed Validation Procedure 2003/09/14 19:01:34| Validated 17149 Entries 2003/09/14 19:01:34| store_swap_size = 351852k 2003/09/14 19:01:34| storeLateRelease: released 0 objects ntlm-auth[2044]: Got 'YR' from Squid ntlm-auth[2044]: attempting SSPI challenge retrieval ntlm-auth[2044]: Got it ntlm-auth[2044]: sending 'TT' to squid with data: [0000] 4E 54 4C 4D 53 53 50 00 02 00 00 00 00 00 00 00 NTLMSSP. ........ [0010] 30 00 00 00 82 82 00 00 B4 17 64 39 44 8A 1C B8 0....... ..d9D... [0020] 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00 ........ ....0... ntlm-auth[2044]: Got 'KK' from Squid with data: [0000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........ [0010] 57 00 00 00 18 00 18 00 6F 00 00 00 02 00 02 00 W....... o....... [0020] 48 00 00 00 08 00 08 00 4A 00 00 00 05 00 05 00 H....... J....... [0030] 52 00 00 00 00 00 00 00 87 00 00 00 06 82 00 02 R....... ........ [0040] 05 02 CE 0E 00 00 00 0F 53 47 53 45 52 41 53 53 ........ SGSERASS [0050] 49 4F 53 49 52 49 4F 65 E8 AD FC A0 AF 19 77 21 IOSIRIOe ......w. [0060] 5D A7 B0 03 2F A6 83 E0 D1 1B 00 6C 31 12 F5 65 ........ ...l1..e [0070] E8 AD FC A0 AF 19 77 21 5D A7 B0 03 2F A6 83 E0 ......w. ........ [0080] D1 1B 00 6C 31 12 F5 ...l1.. ntlm-auth[2044]: checking domain: 'SG', user: 'SERASSIO' ntlm-auth[2044]: Login attempt had result 1 ntlm-auth[2044]: credentials: SG\SERASSIO ntlm-auth[2044]: sending 'AF sg\serassio' to squid ntlm-auth[2044]: Got 'YR' from Squid ntlm-auth[2044]: attempting SSPI challenge retrieval ntlm-auth[2044]: Got it ntlm-auth[2044]: sending 'TT' to squid with data: [0000] 4E 54 4C 4D 53 53 50 00 02 00 00 00 00 00 00 00 NTLMSSP. ........ [0010] 30 00 00 00 82 82 00 00 4E 67 ED CC 5F 68 6C 40 0....... Ng...hl. [0020] 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00 ........ ....0... ntlm-auth[2044]: Got 'KK' from Squid with data: [0000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........ [0010] 57 00 00 00 18 00 18 00 6F 00 00 00 02 00 02 00 W....... o....... [0020] 48 00 00 00 08 00 08 00 4A 00 00 00 05 00 05 00 H....... J....... [0030] 52 00 00 00 00 00 00 00 87 00 00 00 06 82 00 02 R....... ........ [0040] 05 02 CE 0E 00 00 00 0F 53 47 53 45 52 41 53 53 ........ SGSERASS [0050] 49 4F 53 49 52 49 4F 2B A9 CC 25 98 B5 3E 2D 72 IOSIRIO. .......r [0060] B6 25 D6 97 29 E9 F1 10 A5 4E A8 B3 6C 66 25 2B ........ .N..lf.. [0070] A9 CC 25 98 B5 3E 2D 72 B6 25 D6 97 29 E9 F1 10 .......r ........ [0080] A5 4E A8 B3 6C 66 25 .N..lf. ntlm-auth[2044]: checking domain: 'SG', user: 'SERASSIO' ntlm-auth[2044]: Login attempt had result 1 ntlm-auth[2044]: credentials: SG\SERASSIO ntlm-auth[2044]: sending 'AF sg\serassio' to squid ntlm-auth[2044]: Got 'YR' from Squid ntlm-auth[2044]: attempting SSPI challenge retrieval ntlm-auth[2044]: Got it ntlm-auth[2044]: sending 'TT' to squid with data: [0000] 4E 54 4C 4D 53 53 50 00 02 00 00 00 00 00 00 00 NTLMSSP. ........ [0010] 30 00 00 00 82 82 00 00 0B E0 97 AD DD 61 E3 39 0....... .....a.9 [0020] 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00 ........ ....0... ntlm-auth[2044]: Got 'KK' from Squid with data: [0000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........ [0010] 57 00 00 00 18 00 18 00 6F 00 00 00 02 00 02 00 W....... o....... [0020] 48 00 00 00 08 00 08 00 4A 00 00 00 05 00 05 00 H....... J....... [0030] 52 00 00 00 00 00 00 00 87 00 00 00 06 82 00 02 R....... ........ [0040] 05 02 CE 0E 00 00 00 0F 53 47 53 45 52 41 53 53 ........ SGSERASS [0050] 49 4F 53 49 52 49 4F B5 D9 A9 0D 96 01 E0 51 91 IOSIRIO. ......Q. [0060] 13 C4 75 D1 7C DE 07 02 EF 2E 28 9F 95 69 25 B5 ..u..... .....i.. [0070] D9 A9 0D 96 01 E0 51 91 13 C4 75 D1 7C DE 07 02 ......Q. ..u..... [0080] EF 2E 28 9F 95 69 25 .....i. ntlm-auth[2044]: checking domain: 'SG', user: 'SERASSIO' ntlm-auth[2044]: Login attempt had result 1 ntlm-auth[2044]: credentials: SG\SERASSIO ntlm-auth[2044]: sending 'AF sg\serassio' to squid ntlm-auth[2044]: Got 'YR' from Squid ntlm-auth[2044]: attempting SSPI challenge retrieval ntlm-auth[2044]: Got it ntlm-auth[2044]: sending 'TT' to squid with data: [0000] 4E 54 4C 4D 53 53 50 00 02 00 00 00 00 00 00 00 NTLMSSP. ........ [0010] 30 00 00 00 82 82 00 00 C3 38 92 66 7D 26 AF 6A 0....... .8.f...j [0020] 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00 ........ ....0... ntlm-auth[2044]: Got 'KK' from Squid with data: [0000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........ [0010] 57 00 00 00 18 00 18 00 6F 00 00 00 02 00 02 00 W....... o....... [0020] 48 00 00 00 08 00 08 00 4A 00 00 00 05 00 05 00 H....... J....... [0030] 52 00 00 00 00 00 00 00 87 00 00 00 06 82 00 02 R....... ........ [0040] 05 02 CE 0E 00 00 00 0F 53 47 53 45 52 41 53 53 ........ SGSERASS [0050] 49 4F 53 49 52 49 4F F5 0E 4A 12 5F 51 E3 F7 54 IOSIRIO. .J..Q..T [0060] 22 3E 72 92 12 9C 0B FB D2 E8 12 27 92 10 3A F5 ..r..... ........ [0070] 0E 4A 12 5F 51 E3 F7 54 22 3E 72 92 12 9C 0B FB .J..Q..T ..r..... [0080] D2 E8 12 27 92 10 3A ....... ntlm-auth[2044]: checking domain: 'SG', user: 'SERASSIO' ntlm-auth[2044]: Login attempt had result 1 ntlm-auth[2044]: credentials: SG\SERASSIO ntlm-auth[2044]: sending 'AF sg\serassio' to squid ntlm-auth[2044]: Got 'YR' from Squid ntlm-auth[2044]: attempting SSPI challenge retrieval ntlm-auth[2044]: Got it ntlm-auth[2044]: sending 'TT' to squid with data: [0000] 4E 54 4C 4D 53 53 50 00 02 00 00 00 00 00 00 00 NTLMSSP. ........ [0010] 30 00 00 00 82 82 00 00 8C 01 A8 C0 E6 7A 36 88 0....... .....z6. [0020] 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00 ........ ....0... ntlm-auth[2044]: Got 'KK' from Squid with data: [0000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........ [0010] 57 00 00 00 18 00 18 00 6F 00 00 00 02 00 02 00 W....... o....... [0020] 48 00 00 00 08 00 08 00 4A 00 00 00 05 00 05 00 H....... J....... [0030] 52 00 00 00 00 00 00 00 87 00 00 00 06 82 00 02 R....... ........ [0040] 05 02 CE 0E 00 00 00 0F 53 47 53 45 52 41 53 53 ........ SGSERASS [0050] 49 4F 53 49 52 49 4F C6 D3 45 D0 26 E7 81 D1 73 IOSIRIO. .E.....s [0060] 17 EE 8E CA 63 09 6D DC 92 9F 07 BA 5E 1A C9 C6 ....c.m. ........ [0070] D3 45 D0 26 E7 81 D1 73 17 EE 8E CA 63 09 6D DC .E.....s ....c.m. [0080] 92 9F 07 BA 5E 1A C9 ....... ntlm-auth[2044]: checking domain: 'SG', user: 'SERASSIO' ntlm-auth[2044]: Login attempt had result 1 ntlm-auth[2044]: credentials: SG\SERASSIO ntlm-auth[2044]: sending 'AF sg\serassio' to squid 2003/09/14 19:03:17| Leaving Squid service 2003/09/14 19:03:17| Preparing for shutdown after 16 requests 2003/09/14 19:03:17| Waiting 5 seconds for active connections to finish 2003/09/14 19:03:17| FD 59 Closing HTTP connection 2003/09/14 19:03:17| Closing Pinger socket on FD 63 2003/09/14 19:03:17| Shutting down... 2003/09/14 19:03:17| FD 60 Closing ICP connection 2003/09/14 19:03:17| FD 61 Closing SNMP socket 2003/09/14 19:03:17| assertion failed: C:\work\nt-2.5\src\auth\ntlm\auth_ntlm.c:121: "memPoolInUseCount(ntlm_user_pool) == 0" 2003/09/14 19:03:17| Closing unlinkd pipe on FD 53 2003/09/14 19:03:17| storeDirWriteCleanLogs: Starting... 2003/09/14 19:03:18| Finished. Wrote 17149 entries. 2003/09/14 19:03:18| Took 0.0 seconds (1143266.7 entries/sec). CPU Usage: 0.750 seconds = 0.281 user + 0.469 sys Maximum Resident Size: 15276 KB Page faults with physical i/o: 4012 2003/09/14 19:03:18| Squid Cache (Version 2.5.STABLE3-NT-CVS): Exiting normally.
1063558937.349 0 sirio.sg.private TCP_DENIED/407 1861 GET ftp://oss.sgi.com/pub/linux/mips/misc/magnum-4000 - NONE/- text/html [User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: oss.sgi.com:21\r\nProxy-Connection: Keep-Alive\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 1442\r\nExpires: Sun, 14 Sep 2003 17:02:17 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM\r\nProxy-Authenticate: Basic realm="Squid proxy-caching web server"\r\n\r] 1063558937.412 47 sirio.sg.private TCP_DENIED/407 1865 GET ftp://oss.sgi.com/pub/linux/mips/misc/magnum-4000 - NONE/- text/html [User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: oss.sgi.com:21\r\nProxy-Connection: Keep-Alive\r\nProxy-Authorization: NTLM TlRMTVNTUAABAAAAB7IIogIAAgAtAAAABQAFACgAAAAFAs4OAAAAD1NJUklPU0c=\r\n] [HTTP/1.0 407 Proxy Authentication Required\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 1442\r\nExpires: Sun, 14 Sep 2003 17:02:17 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nProxy-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAADAAAACCggAAtBdkOUSKHLgAAAAAAAAAAAAAAAAwAAAA\r\n\r] 1063558937.490 78 sirio.sg.private TCP_HIT/200 2420 GET ftp://oss.sgi.com/pub/linux/mips/misc/magnum-4000 sg\serassio NONE/- text/html [User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: oss.sgi.com:21\r\nProxy-Connection: Keep-Alive\r\nProxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAFcAAAAYABgAbwAAAAIAAgBIAAAACAAIAEoAAAAFAAUAUgAAAAAAAACHAAAABoIAAgUCzg4AAAAPU0dTRVJBU1NJT1NJUklPZeit/KCvGXchXaewAy+mg+DRGwBsMRL1Zeit/KCvGXchXaewAy+mg+DRGwBsMRL1\r\n] [HTTP/1.0 200 Gatewaying\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sat, 13 Sep 2003 17:36:19 GMT\r\nContent-Type: text/html\r\n\r] 1063558937.506 0 sirio.sg.private TCP_DENIED/401 1909 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-dirup.gif - NONE/- text/html [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\n] [HTTP/1.0 401 Unauthorized\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 1517\r\nExpires: Sun, 14 Sep 2003 17:02:17 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: NTLM\r\nWWW-Authenticate: Basic realm="Squid proxy-caching web server"\r\n\r] 1063558937.521 0 sirio.sg.private TCP_DENIED/401 1915 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-unknown.gif - NONE/- text/html [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\n] [HTTP/1.0 401 Unauthorized\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 1523\r\nExpires: Sun, 14 Sep 2003 17:02:17 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: NTLM\r\nWWW-Authenticate: Basic realm="Squid proxy-caching web server"\r\n\r] 1063558937.537 16 sirio.sg.private TCP_DENIED/401 1906 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-text.gif - NONE/- text/html [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\n] [HTTP/1.0 401 Unauthorized\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 1514\r\nExpires: Sun, 14 Sep 2003 17:02:17 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: NTLM\r\nWWW-Authenticate: Basic realm="Squid proxy-caching web server"\r\n\r] 1063558937.537 0 sirio.sg.private TCP_DENIED/401 1903 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-box.gif - NONE/- text/html [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\n] [HTTP/1.0 401 Unauthorized\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 1511\r\nExpires: Sun, 14 Sep 2003 17:02:17 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: NTLM\r\nWWW-Authenticate: Basic realm="Squid proxy-caching web server"\r\n\r] 1063558967.209 47 sirio.sg.private TCP_DENIED/401 1915 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-dirup.gif - NONE/- text/html [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\nAuthorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFAs4OAAAADw==\r\n] [HTTP/1.0 401 Unauthorized\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 1517\r\nExpires: Sun, 14 Sep 2003 17:02:47 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAADAAAACCggAATmftzF9obEAAAAAAAAAAAAAAAAAwAAAA\r\n\r] 1063558967.256 47 sirio.sg.private TCP_MEM_HIT/200 447 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-dirup.gif sg\serassio NONE/- image/gif [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\nAuthorization: NTLM TlRMTVNTUAADAAAAGAAYAFcAAAAYABgAbwAAAAIAAgBIAAAACAAIAEoAAAAFAAUAUgAAAAAAAACHAAAABoIAAgUCzg4AAAAPU0dTRVJBU1NJT1NJUklPK6nMJZi1Pi1ytiXWlynp8RClTqizbGYlK6nMJZi1Pi1ytiXWlynp8RClTqizbGYl\r\n] [HTTP/1.0 200 OK\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:01:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 147\r\nLast-Modified: Sat, 15 Mar 2003 20:04:53 GMT\r\nCache-Control: max-age=86400\r\n\r] 1063558967.272 0 sirio.sg.private TCP_MEM_HIT/200 469 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-compressed.gif sg\serassio NONE/- image/gif [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\n] [HTTP/1.0 200 OK\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:01:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 169\r\nLast-Modified: Sat, 15 Mar 2003 20:04:52 GMT\r\nCache-Control: max-age=86400\r\n\r] 1063558969.225 63 sirio.sg.private TCP_DENIED/401 1921 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-unknown.gif - NONE/- text/html [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\nAuthorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFAs4OAAAADw==\r\n] [HTTP/1.0 401 Unauthorized\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:49 GMT\r\nContent-Type: text/html\r\nContent-Length: 1523\r\nExpires: Sun, 14 Sep 2003 17:02:49 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAADAAAACCggAAC+CXrd1h4zkAAAAAAAAAAAAAAAAwAAAA\r\n\r] 1063558969.303 47 sirio.sg.private TCP_MEM_HIT/200 463 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-unknown.gif sg\serassio NONE/- image/gif [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\nAuthorization: NTLM TlRMTVNTUAADAAAAGAAYAFcAAAAYABgAbwAAAAIAAgBIAAAACAAIAEoAAAAFAAUAUgAAAAAAAACHAAAABoIAAgUCzg4AAAAPU0dTRVJBU1NJT1NJUklPtdmpDZYB4FGRE8R10XzeBwLvLiiflWkltdmpDZYB4FGRE8R10XzeBwLvLiiflWkl\r\n] [HTTP/1.0 200 OK\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:01:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 163\r\nLast-Modified: Sat, 15 Mar 2003 20:04:58 GMT\r\nCache-Control: max-age=86400\r\n\r] 1063558970.959 47 sirio.sg.private TCP_DENIED/401 1912 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-text.gif - NONE/- text/html [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\nAuthorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFAs4OAAAADw==\r\n] [HTTP/1.0 401 Unauthorized\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 1514\r\nExpires: Sun, 14 Sep 2003 17:02:50 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAADAAAACCggAAwziSZn0mr2oAAAAAAAAAAAAAAAAwAAAA\r\n\r] 1063558971.006 47 sirio.sg.private TCP_MEM_HIT/200 453 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-text.gif sg\serassio NONE/- image/gif [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\nAuthorization: NTLM TlRMTVNTUAADAAAAGAAYAFcAAAAYABgAbwAAAAIAAgBIAAAACAAIAEoAAAAFAAUAUgAAAAAAAACHAAAABoIAAgUCzg4AAAAPU0dTRVJBU1NJT1NJUklP9Q5KEl9R4/dUIj5ykhKcC/vS6BInkhA69Q5KEl9R4/dUIj5ykhKcC/vS6BInkhA6\r\n] [HTTP/1.0 200 OK\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:01:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 153\r\nLast-Modified: Sat, 15 Mar 2003 20:04:58 GMT\r\nCache-Control: max-age=86400\r\n\r] 1063558972.647 47 sirio.sg.private TCP_DENIED/401 1909 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-box.gif - NONE/- text/html [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\nAuthorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFAs4OAAAADw==\r\n] [HTTP/1.0 401 Unauthorized\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:02:52 GMT\r\nContent-Type: text/html\r\nContent-Length: 1511\r\nExpires: Sun, 14 Sep 2003 17:02:52 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAADAAAACCggAAjAGowOZ6NogAAAAAAAAAAAAAAAAwAAAA\r\n\r] 1063558972.693 46 sirio.sg.private TCP_MEM_HIT/200 476 GET http://proxy.sg.private:3128/squid-internal-static/icons/anthony-box.gif sg\serassio NONE/- image/gif [Accept: */*\r\nAccept-Language: it\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)\r\nHost: proxy.sg.private:3128\r\nConnection: Keep-Alive\r\nAuthorization: NTLM TlRMTVNTUAADAAAAGAAYAFcAAAAYABgAbwAAAAIAAgBIAAAACAAIAEoAAAAFAAUAUgAAAAAAAACHAAAABoIAAgUCzg4AAAAPU0dTRVJBU1NJT1NJUklPxtNF0CbngdFzF+6OymMJbdySnwe6XhrJxtNF0CbngdFzF+6OymMJbdySnwe6XhrJ\r\n] [HTTP/1.0 200 OK\r\nServer: squid/2.5.STABLE3-NT-CVS\r\nMime-Version: 1.0\r\nDate: Sun, 14 Sep 2003 17:01:33 GMT\r\nContent-Type: image/gif\r\nContent-Length: 176\r\nLast-Modified: Sat, 15 Mar 2003 20:04:51 GMT\r\nCache-Control: max-age=86400\r\n\r]
