[afnog] Proxy server crushes

Paul Ikanza PIkanza at newvision.co.ug
Fri Nov 18 09:21:44 EAT 2005


Check your memory usage, do a df -h and see what percentage of memory is
available. I have had the problem with squid stopping because it was out
of memory. You may have allocated it little memory.

Paul.

-----Original Message-----
From: EmmanuelKwarteng [mailto:kwarteng at ghanatel.com.gh] 
Sent: 17 November 2005 17:00
To: afnog at afnog.org
Subject: [afnog] Proxy server crushes


Hello,

I have a squid server installed with about 80 test customers on it.
The squid server crushes after every 3 to 4 days. Whenever it crushes, I
am 
not able to access it via ssh and needs to restart it onsite manually
for it 
to come up.

Please find bellow the cache log just before it crushed:

----------------------------------------------------------------

2005/11/16 21:14:00| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/cards-all.gif"
2005/11/16 21:14:01| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/bagz-all.gif"
2005/11/16 21:14:01| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/tour-all.gif"
2005/11/16 21:14:02| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/cars-all.gif"
2005/11/16 21:14:03| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/logon-mail1.gif"
2005/11/16 21:14:03| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/shap_yar_1.gif"
2005/11/16 21:14:06| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/both_off.gif"
2005/11/16 21:14:07| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/off.gif"
2005/11/16 21:14:07| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/left_on.gif"
2005/11/16 21:14:34| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/go-all.gif"
2005/11/16 21:14:47| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/i-vote.gif"
2005/11/16 21:14:47| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/i-seealso.gif"
2005/11/16 21:14:51| httpReadReply: Excess data from "GET
http://img.mail.ru/
mai
l/ru/images/dumb.gif"
2005/11/16 21:15:02| clientReadRequest: FD 506 Invalid Request
2005/11/16 21:15:30| httpReadReply: Request not yet fully sent "POST
http://
ems.
sexsearchcom.com/EMS_container.php?option=1"
2005/11/16 21:16:01| clientReadRequest: FD 106 Invalid Request
2005/11/16 21:16:22| clientReadRequest: FD 788 Invalid Request
2005/11/16 21:16:58| clientReadRequest: FD 577 Invalid Request
2005/11/16 21:17:08| clientReadRequest: FD 102 Invalid Request
2005/11/16 21:17:35| clientReadRequest: FD 841 Invalid Request
2005/11/16 21:18:10| clientReadRequest: FD 228 Invalid Request
2005/11/16 21:18:30| clientReadRequest: FD 770 Invalid Request
2005/11/16 21:18:42| clientReadRequest: FD 616 Invalid Request
2005/11/16 21:18:51| clientReadRequest: FD 328 Invalid Request
2005/11/16 21:20:02| clientReadRequest: FD 258 Invalid Request
2005/11/16 21:21:01| clientReadRequest: FD 670 Invalid Request
2005/11/16 21:21:22| clientReadRequest: FD 334 Invalid Request
2005/11/16 21:21:58| clientReadRequest: FD 17 Invalid Request
2005/11/16 21:22:08| clientReadRequest: FD 541 Invalid Request
2005/11/16 21:22:36| clientReadRequest: FD 596 Invalid Request
2005/11/16 21:23:08| clientReadRequest: FD 245 Invalid Request
2005/11/16 21:23:30| clientReadRequest: FD 501 Invalid Request
2005/11/16 21:23:42| clientReadRequest: FD 31 Invalid Request
2005/11/16 21:23:51| clientReadRequest: FD 555 Invalid Request
2005/11/16 21:24:12| parseHttpRequest: Unsupported method 
'recipientid=99&sessio
nid=1066

'
2005/11/16 21:24:12| clientReadRequest: FD 435 Invalid Request
2005/11/16 21:24:12| parseHttpRequest: Unsupported method 
'recipientid=99&sessio
nid=1066

'
2005/11/16 21:24:12| clientReadRequest: FD 494 Invalid Request
2005/11/16 21:24:44| parseHttpRequest: Unsupported method 
'recipientid=105&sessi
onid=730

'
2005/11/16 21:24:44| clientReadRequest: FD 615 Invalid Request
2005/11/16 21:24:44| parseHttpRequest: Unsupported method 
'recipientid=105&sessi
onid=730

'
2005/11/16 21:24:44| clientReadRequest: FD 626 Invalid Request
2005/11/16 21:25:03| clientReadRequest: FD 595 Invalid Request
2005/11/16 21:25:25| httpReadReply: Excess data from "GET
http://c.goclick.
com/r
?
X=uEvgptEQmdESjEFeptEVnDuSjENxsuq9mteUjFeRpteRmTiRnTyTnt26mtm6nDyUoD2TnT
mGrvBu
p
taGuUFepteWjFbpuTUSjFnqpteZodEYmszvqTUQlDmS"
2005/11/16 21:26:01| clientReadRequest: FD 410 Invalid Request
2005/11/16 21:26:10| httpSendRequestEntryDone: Likely proxy abuse
detected 
'80.8
7.80.128' -> 'http://filetransfer.msg.yahoo.com/notifyft'
2005/11/16 21:26:22| clientReadRequest: FD 835 Invalid Request
2005/11/16 21:26:38| httpSendRequestEntryDone: Likely proxy abuse
detected 
'80.8
7.85.1' -> 'http://filetransfer.msg.yahoo.com/notifyft'
2005/11/16 21:26:58| clientReadRequest: FD 57 Invalid Request
2005/11/16 21:27:08| clientReadRequest: FD 525 Invalid Request
2005/11/16 21:27:12| parseHttpRequest: Unsupported method 
'recipientid=101&sessi
onid=1729

'
2005/11/16 21:27:12| clientReadRequest: FD 418 Invalid Request
2005/11/16 21:27:36| clientReadRequest: FD 631 Invalid Request
2005/11/16 21:28:10| clientReadRequest: FD 675 Invalid Request
2005/11/16 21:28:17| clientReadRequest: FD 73 Invalid Request
2005/11/16 21:28:30| clientReadRequest: FD 266 Invalid Request
2005/11/16 21:28:42| clientReadRequest: FD 330 Invalid Request
2005/11/16 21:28:51| clientReadRequest: FD 485 Invalid Request
2005/11/16 21:29:27| httpSendRequestEntryDone: Likely proxy abuse
detected 
'80.8
7.85.1' -> 'http://filetransfer.msg.yahoo.com/notifyft'
2005/11/16 21:30:02| clientReadRequest: FD 284 Invalid Request

------------------------------------------


I also did a "top" and this is what I got:

 PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
 2206 root      16   0 22152  11m  12m S 67.1  0.6 160:32.61 X
 2091 nobody    16   0 24420  22m 2184 S 64.5  1.1 112:54.16 squid
 2926 root      34  19  4484 1424 2864 S  7.3  0.1  17:41.52
interference
 2876 root      26  10 34928  20m  23m S  1.0  1.0   2:18.83
rhn-applet-gui
 2840 nobody    15   0  1620  280 1272 S  0.7  0.0   0:37.58 unlinkd
    8 root      RT   0     0    0    0 S  0.3  0.0   0:52.34 migration/3
 3604 root      16   0  3788  964 1664 R  0.3  0.0   0:00.16 top
    1 root      16   0  1692  564 1408 S  0.0  0.0   0:01.22 init
    2 root      RT   0     0    0    0 S  0.0  0.0   0:12.48 migration/0
    3 root      34  19     0    0    0 S  0.0  0.0   0:00.04 ksoftirqd/0
    4 root      RT   0     0    0    0 S  0.0  0.0   0:00.10 migration/1
    5 root      34  19     0    0    0 S  0.0  0.0   0:00.03 ksoftirqd/1
    6 root      RT   0     0    0    0 S  0.0  0.0   0:12.89 migration/2
    7 root      34  19     0    0    0 S  0.0  0.0   0:00.01 ksoftirq

Regards,

Kwarteng





_______________________________________________
afnog mailing list





More information about the afnog mailing list