What should I look for in logs? Regards, Rikunj Patel Systems Administrator --Raha.com ----- Original Message ----- From: "Elsen Marc" <elsen@xxxxxxx> To: "Rikunj" <Rikunj@xxxxxxxx>; <squid-users@xxxxxxxxxxxxxxx> Sent: Tuesday, April 12, 2005 6:15 PM Subject: RE: [squid-users] Request header is too large. > > Hello Gurus, > > I am sorry to send this question, but my search could not > generate anything > useful. > > ---------------------------------------------------- > Server HP DL380 with 1GB RAM > 72GB ULTRA FAST SCSI > RHES -3 > # uname -a > Linux BM 2.4.21-15.ELsmp #1 SMP Thu Apr 22 00:18:24 EDT 2004 > i686 i686 i386 > GNU/Linux > > # squid -v > Squid Cache: Version 2.5.STABLE3 > ---------------------------------------------------- > > I am getting below error from the cache.log. Tried to modify > the config but > did not help. > > 2005/04/12 17:25:27| Config 'request_header_max_size'= 10240 bytes. > 2005/04/12 17:25:28| Request header is too large (11680 bytes) > 2005/04/12 17:25:28| Config 'request_header_max_size'= 10240 bytes. > 2005/04/12 17:25:28| Request header is too large (12287 bytes) > 2005/04/12 17:25:28| Config 'request_header_max_size'= 10240 bytes. Mainly due , to bogus clients. Or malicious http-worming programs, doing wrong stuff. Try to identify the clients by looking in squid's access.log. > > My squid.conf says. > ---------------------------------------------------- > > # cat squid.conf | grep request_header_max_size > # TAG: request_header_max_size (KB) > request_header_max_size 10 KB > > and on top of this I am also running out of file descriptors. > I tried to increase it manually to ulimit -HSn 65534 > but it changes back to 1024. > > # ulimit -a > core file size (blocks, -c) 0 > data seg size (kbytes, -d) unlimited > file size (blocks, -f) unlimited > max locked memory (kbytes, -l) 4 > max memory size (kbytes, -m) unlimited > open files (-n) 1024 > pipe size (512 bytes, -p) 8 > stack size (kbytes, -s) 10240 > cpu time (seconds, -t) unlimited > max user processes (-u) 7168 > virtual memory (kbytes, -v) unlimited > > What more should I do? Please help. > - Check the FAQ on how to increase the available number of file descriptors. M.