Dear all,
I've got squid 2.4 stable 6 on FreeBSD 4.2. It's been running since 2002 without problem, and without changes to the environment (hardware,OS, etc). The FreeBSD box is a gateway for around 40 -50 concurrent internet users.
Lately on /var/log/messages squid has exited alot due to signal 6.
running squid -N -d1 I can see many complaints like following:
2004/09/03 19:34:26|comm_accept: FD 8: (53) Software caused connection abort
2004/09/03 19:34:26| httpAccept: FD 8: accept failure: (53) Software caused connection abort
or sometimes complaints about available buffer space ...(55)
A few days ago Squid process suddenly took up to 85% oc CPU and the internet was very slow (we are on 2Mb ADSL), looking at netstat -a I saw multiple http connection on www.nymex.com .... found out that one of the workstations was infected by a worm called NYXEM, Symantec calls it W32.Blackmal.mm. I took down the workstation and all went well until last Friday night (3 Sept, 2004) suddenly the internet sort of froze for a few minutes until I restarted squid a few times.
What can this be? How can I debug this? Anymore information I should provide? What should I be looking at?
