Re: [squid-users] Re: have you ever seen this?

From: <alireza@dont-contact.us>
Date: Sat, 22 May 2004 00:33:25 +0430 (IRST)

But these are dial-up users that get this account by buying prepaid
internet card, i do not know them. I changed my squid.conf and increased
'request_header_max_size' to 30 KB . that problem has been solved. but i
am not sure that this optin can affetcs the performance of squid or not (i
mean decrease the performance).BUT i saw another warning in my cache.log
after this changes.what are they?

WARNING: failed to unpack meta data
WARNING: failed to unpack meta data
WARNING: failed to unpack meta data

IS there any relation between 'request_header_max_size' and above errors?

Alireza

> alireza@panaisp.net wrote:
>
>> I am seeing these lines in my cache.log:
>>
>> 2004/05/21 20:14:13| Config 'request_header_max_size'= 10240 bytes.
>> 2004/05/21 20:15:26| Request header is too large (12287 bytes)
>
>> I saw my access.log and find these line on it:
>> 217.68.25.212 - - [21/May/2004:20:21:16 +0430] "NONE
>> error:request-too-large HTTP/0.0" 413 1592 NONE:NONE
>
>> It likes a DOS attack or a virus, and it use many file descriptor so
>> sometimes these lines apear in cache.log
>> 2004/05/21 20:23:00| WARNING! Your cache is running out of
>> filedescriptors
>
>> I recompiled my squid with 32768 filedescriptors but the problem still
>> exist and it affects the performance very much.
>
> Figure out which system is the source of this (you have the IP in
> access.log), block it at the network layer (using your OS's firewall
> capabilities), and then track down and deal with the person responsible.
>
> Adam
>
>
Received on Fri May 21 2004 - 14:11:52 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Jun 01 2004 - 12:00:02 MDT