On Mon, 2005-02-14 at 23:31 +0100, Henrik Nordstrom wrote: > On Tue, 15 Feb 2005, Andrew Bartlett wrote: > > > I have my logfile analysis system mail me when I get an entry in the > > access.log that it can't parse. I got this access.log line in my mail: > > > > 1108344014.841 1372 xxxx.hawkerc.net TCP_MISS/146749800 1612 GET > > http://cardimg.163.com/cards/image/stamp2.gif xxxxxxx > > DIRECT/61.177.95.18 text/html
I also got: 1108089449.425 4762 xxxx.hawkerc.net TCP_MISS/144454688 1612 GET http://cardimg.163.com/cards/image/stamp2.gif xxxx DIRECT/61.177.95.39 text/html > > Any ideas if the TCP_MISS/146749800 this indicates a squid error? - I > > was expecting 3-digit response codes. It is Squid 2.5-STABLE8-RC4. > > Looks odd indeed. > > The size is also much smaller than expected. > > Any change the problem can be reproduced? Preferably while saving a packet > trace of the traffic.. I'm not sure (and I won't be onsite today). The other details are: Client: Mozilla Firefox (post 1.0 snapshot) Authenticated with NTLM This is over the past 2 weeks worth of logs, so I'm not sure if it happens 'often' (and I've yet trawled the logs for a 'normal' case on this URL). Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net
signature.asc
Description: This is a digitally signed message part
