Re: Odd HTTP response codes

On Mon, 2005-02-14 at 23:31 +0100, Henrik Nordstrom wrote:
> On Tue, 15 Feb 2005, Andrew Bartlett wrote:
>
> > I have my logfile analysis system mail me when I get an entry in the
> > access.log that it can't parse. I got this access.log line in my mail:
> >
> > 1108344014.841 1372 xxxx.hawkerc.net TCP_MISS/146749800 1612 GET
> > http://cardimg.163.com/cards/image/stamp2.gif xxxxxxx
> > DIRECT/61.177.95.18 text/html

I also got:
1108089449.425 4762 xxxx.hawkerc.net TCP_MISS/144454688 1612 GET
http://cardimg.163.com/cards/image/stamp2.gif xxxx DIRECT/61.177.95.39
text/html

> > Any ideas if the TCP_MISS/146749800 this indicates a squid error? - I
> > was expecting 3-digit response codes. It is Squid 2.5-STABLE8-RC4.
>
> Looks odd indeed.
>
> The size is also much smaller than expected.
>
> Any change the problem can be reproduced? Preferably while saving a packet
> trace of the traffic..

I'm not sure (and I won't be onsite today). The other details are:

Client: Mozilla Firefox (post 1.0 snapshot)
Authenticated with NTLM

This is over the past 2 weeks worth of logs, so I'm not sure if it
happens 'often' (and I've yet trawled the logs for a 'normal' case on
this URL).

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net