> Hi John, > > As Amos mentioned, it would be great to see http payload of the > packets (use - Afnn switches for this). Also traffic on proxy itself is more > interesting. > IIRC, 502 status code means that your proxy has some issues when > reading data from origin server. Do you see anything suspicious in cache.log? > > Best wishes, > Pavel
Hi Pavel, Nothing in the cache.log, I can run in debug mode, which debug section do you require? Also here is an example when it is not working with the extra switches: # tcpdump -Afnn -i eth0 dst 66.151.79.155 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 09:04:32.116091 IP 192.168.1.25.46211 > 66.151.79.155.80: S 4039121358:403912135 E..<f.@[email protected]....................... .#.......... 09:04:32.318700 IP 192.168.1.25.46211 > 66.151.79.155.80: . ack 286216074 win 23 ....B.O....P......O............ .#...... 09:04:32.319875 IP 192.168.1.25.46211 > 66.151.79.155.80: P 0:670(670) ack 1 win E...f.@.@.}n....B.O....P......O......q..... .#......POST /scripts/mms.dll/JAWS/MMS 09:04:32.320134 IP 192.168.1.25.46211 > 66.151.79.155.80: P 670:745(75) ack 1 wi E...f.@[email protected]...... .#......as_userid=asamuels&as_dbpass=a 09:04:32.550586 IP 192.168.1.25.46211 > 66.151.79.155.80: . ack 327 win 27 <nop, E..4f.@.@.. ....B.O....P......P.....r...... .#.... . 09:04:32.686331 IP 192.168.1.25.46211 > 66.151.79.155.80: P 745:1431(686) ack 32 E...f.@.@.}[....B.O....P......P.....@...... .#.F.. .GET /scripts/mms.dll/JAWS/MMS/ # tcpdump -Afnn -i eth0 src 66.151.79.155 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 09:04:32.318666 IP 66.151.79.155.80 > 192.168.1.25.46211: S 286216073:286216073( E..@[email protected]....... ............ 09:04:32.522998 IP 66.151.79.155.80 > 192.168.1.25.46211: . ack 746 win 64790 <n [email protected].].B.O......P....O.........x...... .. ..#.. 09:04:32.550562 IP 66.151.79.155.80 > 192.168.1.25.46211: P 1:327(326) ack 746 w [email protected].\GB.O......P....O.......... .. ..#..HTTP/1.1 200 OK Server: Jagua 09:04:32.897232 IP 66.151.79.155.80 > 192.168.1.25.46211: R 327:327(0) ack 1432 E..([email protected].].B.O......P....P....fP...5......... Cheers, John
