[afnog] Proxy server crushes
Paul Ikanza
PIkanza at newvision.co.ug
Fri Nov 18 09:21:44 EAT 2005
Check your memory usage, do a df -h and see what percentage of memory is
available. I have had the problem with squid stopping because it was out
of memory. You may have allocated it little memory.
Paul.
-----Original Message-----
From: EmmanuelKwarteng [mailto:kwarteng at ghanatel.com.gh]
Sent: 17 November 2005 17:00
To: afnog at afnog.org
Subject: [afnog] Proxy server crushes
Hello,
I have a squid server installed with about 80 test customers on it.
The squid server crushes after every 3 to 4 days. Whenever it crushes, I
am
not able to access it via ssh and needs to restart it onsite manually
for it
to come up.
Please find bellow the cache log just before it crushed:
----------------------------------------------------------------
2005/11/16 21:14:00| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/cards-all.gif"
2005/11/16 21:14:01| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/bagz-all.gif"
2005/11/16 21:14:01| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/tour-all.gif"
2005/11/16 21:14:02| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/cars-all.gif"
2005/11/16 21:14:03| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/logon-mail1.gif"
2005/11/16 21:14:03| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/shap_yar_1.gif"
2005/11/16 21:14:06| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/both_off.gif"
2005/11/16 21:14:07| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/off.gif"
2005/11/16 21:14:07| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/left_on.gif"
2005/11/16 21:14:34| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/go-all.gif"
2005/11/16 21:14:47| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/i-vote.gif"
2005/11/16 21:14:47| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/i-seealso.gif"
2005/11/16 21:14:51| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/dumb.gif"
2005/11/16 21:15:02| clientReadRequest: FD 506 Invalid Request
2005/11/16 21:15:30| httpReadReply: Request not yet fully sent "POST
http://
ems.
sexsearchcom.com/EMS_container.php?option=1"
2005/11/16 21:16:01| clientReadRequest: FD 106 Invalid Request
2005/11/16 21:16:22| clientReadRequest: FD 788 Invalid Request
2005/11/16 21:16:58| clientReadRequest: FD 577 Invalid Request
2005/11/16 21:17:08| clientReadRequest: FD 102 Invalid Request
2005/11/16 21:17:35| clientReadRequest: FD 841 Invalid Request
2005/11/16 21:18:10| clientReadRequest: FD 228 Invalid Request
2005/11/16 21:18:30| clientReadRequest: FD 770 Invalid Request
2005/11/16 21:18:42| clientReadRequest: FD 616 Invalid Request
2005/11/16 21:18:51| clientReadRequest: FD 328 Invalid Request
2005/11/16 21:20:02| clientReadRequest: FD 258 Invalid Request
2005/11/16 21:21:01| clientReadRequest: FD 670 Invalid Request
2005/11/16 21:21:22| clientReadRequest: FD 334 Invalid Request
2005/11/16 21:21:58| clientReadRequest: FD 17 Invalid Request
2005/11/16 21:22:08| clientReadRequest: FD 541 Invalid Request
2005/11/16 21:22:36| clientReadRequest: FD 596 Invalid Request
2005/11/16 21:23:08| clientReadRequest: FD 245 Invalid Request
2005/11/16 21:23:30| clientReadRequest: FD 501 Invalid Request
2005/11/16 21:23:42| clientReadRequest: FD 31 Invalid Request
2005/11/16 21:23:51| clientReadRequest: FD 555 Invalid Request
2005/11/16 21:24:12| parseHttpRequest: Unsupported method
'recipientid=99&sessio
nid=1066
'
2005/11/16 21:24:12| clientReadRequest: FD 435 Invalid Request
2005/11/16 21:24:12| parseHttpRequest: Unsupported method
'recipientid=99&sessio
nid=1066
'
2005/11/16 21:24:12| clientReadRequest: FD 494 Invalid Request
2005/11/16 21:24:44| parseHttpRequest: Unsupported method
'recipientid=105&sessi
onid=730
'
2005/11/16 21:24:44| clientReadRequest: FD 615 Invalid Request
2005/11/16 21:24:44| parseHttpRequest: Unsupported method
'recipientid=105&sessi
onid=730
'
2005/11/16 21:24:44| clientReadRequest: FD 626 Invalid Request
2005/11/16 21:25:03| clientReadRequest: FD 595 Invalid Request
2005/11/16 21:25:25| httpReadReply: Excess data from "GET
http://c.goclick.
com/r
?
X=uEvgptEQmdESjEFeptEVnDuSjENxsuq9mteUjFeRpteRmTiRnTyTnt26mtm6nDyUoD2TnT
mGrvBu
p
taGuUFepteWjFbpuTUSjFnqpteZodEYmszvqTUQlDmS"
2005/11/16 21:26:01| clientReadRequest: FD 410 Invalid Request
2005/11/16 21:26:10| httpSendRequestEntryDone: Likely proxy abuse
detected
'80.8
7.80.128' -> 'http://filetransfer.msg.yahoo.com/notifyft'
2005/11/16 21:26:22| clientReadRequest: FD 835 Invalid Request
2005/11/16 21:26:38| httpSendRequestEntryDone: Likely proxy abuse
detected
'80.8
7.85.1' -> 'http://filetransfer.msg.yahoo.com/notifyft'
2005/11/16 21:26:58| clientReadRequest: FD 57 Invalid Request
2005/11/16 21:27:08| clientReadRequest: FD 525 Invalid Request
2005/11/16 21:27:12| parseHttpRequest: Unsupported method
'recipientid=101&sessi
onid=1729
'
2005/11/16 21:27:12| clientReadRequest: FD 418 Invalid Request
2005/11/16 21:27:36| clientReadRequest: FD 631 Invalid Request
2005/11/16 21:28:10| clientReadRequest: FD 675 Invalid Request
2005/11/16 21:28:17| clientReadRequest: FD 73 Invalid Request
2005/11/16 21:28:30| clientReadRequest: FD 266 Invalid Request
2005/11/16 21:28:42| clientReadRequest: FD 330 Invalid Request
2005/11/16 21:28:51| clientReadRequest: FD 485 Invalid Request
2005/11/16 21:29:27| httpSendRequestEntryDone: Likely proxy abuse
detected
'80.8
7.85.1' -> 'http://filetransfer.msg.yahoo.com/notifyft'
2005/11/16 21:30:02| clientReadRequest: FD 284 Invalid Request
------------------------------------------
I also did a "top" and this is what I got:
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
2206 root 16 0 22152 11m 12m S 67.1 0.6 160:32.61 X
2091 nobody 16 0 24420 22m 2184 S 64.5 1.1 112:54.16 squid
2926 root 34 19 4484 1424 2864 S 7.3 0.1 17:41.52
interference
2876 root 26 10 34928 20m 23m S 1.0 1.0 2:18.83
rhn-applet-gui
2840 nobody 15 0 1620 280 1272 S 0.7 0.0 0:37.58 unlinkd
8 root RT 0 0 0 0 S 0.3 0.0 0:52.34 migration/3
3604 root 16 0 3788 964 1664 R 0.3 0.0 0:00.16 top
1 root 16 0 1692 564 1408 S 0.0 0.0 0:01.22 init
2 root RT 0 0 0 0 S 0.0 0.0 0:12.48 migration/0
3 root 34 19 0 0 0 S 0.0 0.0 0:00.04 ksoftirqd/0
4 root RT 0 0 0 0 S 0.0 0.0 0:00.10 migration/1
5 root 34 19 0 0 0 S 0.0 0.0 0:00.03 ksoftirqd/1
6 root RT 0 0 0 0 S 0.0 0.0 0:12.89 migration/2
7 root 34 19 0 0 0 S 0.0 0.0 0:00.01 ksoftirq
Regards,
Kwarteng
_______________________________________________
afnog mailing list
More information about the afnog
mailing list