Re: [LUG] Proxy Problems

[Austin Gossmeyer <ancwg@xxxxxxxxxxx>]

> Date: Mon, 15 Jun 2009 09:56:01 +0100
> From: simon@xxxxxxxxxxxxxx
> To: list@xxxxxxxxxxxxx
> Subject: Re: [LUG] Proxy Problems
>
> Austin Gossmeyer wrote:
> >
> > Is this what you need?
>
> Yes and check the other logs - especially cache.log to see if there are
> any clues - as that is where errors are logged.
>
> My guess is you'll see a fair chunk of errors about upstream links.
>
> > sudo tail -f /var/log/squid/access.log
> > 1245048659.691 180250 127.0.0.1 TCP_MISS/504 360 POST
> > http://safebrowsing.client
> > s.google.com/safebrowsing/downloads?client=Firefox&appver=3.0.10&pver=2.2&wrkey=
> > AKEgNiu3K25OiwVKVgycgQh1H41jGdmqhaiHsFYtRas-q-4mfaCkWjt6IghaSwAsfQxgoCP2TZu-4PXb
>
> 180 seconds? Very slow.
>
> 504 is "gateway timed out". So something wrong with routing probably you
> needed to use the upstream proxy and didn't?!
>
> Although others in the education sector probably have more idea on the
> specifics of your connection.
>
> > QIc2zmUMMvwI3TQQCw== - DIRECT/209.85.227.101 text/html
>
> Direct to a Google IP
>
>
> > 1245050461.996 182549 127.0.0.1 TCP_MISS/504 360 POST
> > http://safebrowsing.client
> > s.google.com/safebrowsing/downloads?client=Firefox&appver=3.0.10&pver=2.2&wrkey=
> > AKEgNiu3K25OiwVKVgycgQh1H41jGdmqhaiHsFYtRas-q-4mfaCkWjt6IghaSwAsfQxgoCP2TZu-4PXb
> > QIc2zmUMMvwI3TQQCw== - DIRECT/209.85.227.100 text/html
> > 1245050805.054 179946 127.0.0.1 TCP_MISS/504 360 GET
> > http://go.microsoft.com/fwl ink/?LinkId=69157 -
> > DIRECT/64.4.52.189 text/html
> > 1245051530.466 36 127.0.0.1 TCP_MISS/302 695 GET
> > http://www.google.com/ - FI
> > RST_UP_PARENT/proxy.liskeard.cornwall.sch.uk text/html
> > 1245051530.541 68 127.0.0.1 TCP_MISS/200 8702 GET
> > http://www.google.co.uk/ -
> > FIRST_UP_PARENT/proxy.liskeard.cornwall.sch.uk text/html
>
> These requests succeeded and were quick, but instead of going direct
> they went to an upstream proxy.
>
> > 1245051693.208 179730 127.0.0.1 TCP_MISS/504 360 GET
> > http://msnportal.112.2o7.net/b/ss/msnportalukhome/1/H.1-pdv-2/s23095015961754?%5BAQB%5D&ndh=1&t=15%2F5%2F2009%208%3A37%3A42%201%20-60&ns=msnportal&pageName=UK%20HomePage&g=http%3A%2F%2Fuk.msn.com%2F%3Focid%3Diehp&r=&s=1366x768&c=32&k=Y&bw=1362&bh=560&hp=N&c12=http%3A%2F%2Fcars.uk.msn.com%2FNews%2Fcar_news_article.aspx%3Fcp-documentid%3D147896722&c13=msnbody%3Ewrapper%3Epage%3Econtent%3Earea1&c15=2&c16=Cool%20customers&c17=UK%20HomePage%3Auk.msn.com&c18=&pe=lnk_o&pev2=Cool%20customers&%5BAQE%5D
> > - DIRECT/66.235.138.3 text/html
>
> You probably don't care about these folks anyway. One of those groups
> collecting information of websurfers for advertising (we hope).
>
>
> I don't see an obvious pattern to when it is going direct and when it is
> using the proxy.liskeard.cornwall.sch.uk, but hopefully that is more
> obvious to yourself.
>
> The cache log may also hold a clue, if say the upstream proxy is
> unreachable or something like that.
>
cahce.log results
 
sudo tail -f /var/log/squid/cache.log
2009/06/15 07:49:53| storeDirWriteCleanLogs: Starting...
2009/06/15 07:49:53|   Finished.  Wrote 357 entries.
2009/06/15 07:49:53|   Took 0.0 seconds (351724.1 entries/sec).
2009/06/15 07:49:53| logfileRotate: /var/log/squid/store.log
2009/06/15 07:49:53| logfileRotate (stdio): /var/log/squid/store.log
2009/06/15 07:49:53| logfileRotate: /var/log/squid/access.log
2009/06/15 07:49:53| logfileRotate (stdio): /var/log/squid/access.log


> Simon
>
> --
> The Mailing List for the Devon & Cornwall LUG
> http://mailman.dclug.org.uk/listinfo/list
> FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html

---

Lauren found her dream laptop. Find the PC that’s right for you.

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html