Henrik, I'm trying with the wccpv2 patch and notice that when I logout, MSN says it could not log me out. I got this error before with squid enable and believe it is related to the sign-in process that I'm having problems. As I always get this error, I was able to get tcpdump info for it (Client IP 10.7.40.50): 19:38:46.119122 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: S 698532612:698532612(0) ack 1001646707 win 5792 <mss 1460,nop,nop,timestamp 2450343 1433094414,nop,wscale 2> 19:38:46.123862 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: . ack 1449 win 2172 <nop,nop,timestamp 2450344 1433094414> 19:38:46.124329 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: . ack 2199 win 2896 <nop,nop,timestamp 2450344 1433094414> 19:38:46.378185 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: P 1:1420(1419) ack 2199 win 2896 <nop,nop,timestamp 2450408 1433094414> 19:38:46.378332 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: F 1420:1420(0) ack 2199 win 2896 <nop,nop,timestamp 2450408 1433094414> 19:38:46.409880 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: . ack 2200 win 2896 <nop,nop,timestamp 2450416 1433094415> 19:38:46.425182 IP 65.54.183.192.http > 10.7.40.50.49314: S 695267443:695267443(0) ack 4241859601 win 5792 <mss 1460,nop,nop,timestamp 2450419 1433094415,nop,wscale 2> 19:38:46.429614 IP 65.54.183.192.http > 10.7.40.50.49314: . ack 699 win 1797 <nop,nop,timestamp 2450421 1433094415> 19:38:46.595194 IP 65.54.183.192.http > 10.7.40.50.49314: . 1:1449(1448) ack 699 win 1797 <nop,nop,timestamp 2450462 1433094415> 19:38:46.595205 IP 65.54.183.192.http > 10.7.40.50.49314: P 1449:1777(328) ack 699 win 1797 <nop,nop,timestamp 2450462 1433094415> 19:38:46.834959 IP 65.54.183.195.http > 10.7.40.50.49315: S 692475596:692475596(0) ack 1799396858 win 5792 <mss 1460,nop,nop,timestamp 2450522 1433094416,nop,wscale 2> 19:38:46.837381 IP 65.54.183.195.http > 10.7.40.50.49315: . ack 534 win 1716 <nop,nop,timestamp 2450522 1433094416> 19:38:47.004368 IP 65.54.183.195.http > 10.7.40.50.49315: . 1:1449(1448) ack 534 win 1716 <nop,nop,timestamp 2450564 1433094416> 19:38:47.004383 IP 65.54.183.195.http > 10.7.40.50.49315: P 1449:2039(590) ack 534 win 1716 <nop,nop,timestamp 2450564 1433094416> 19:38:47.081806 IP 65.54.183.195.http > 10.7.40.50.49315: . 2039:3487(1448) ack 534 win 1716 <nop,nop,timestamp 2450584 1433094416> 19:38:47.082129 IP 65.54.183.195.http > 10.7.40.50.49315: FP 3487:3641(154) ack 534 win 1716 <nop,nop,timestamp 2450584 1433094416> 19:38:47.178159 IP 65.54.183.195.http > 10.7.40.50.49315: . ack 535 win 1716 <nop,nop,timestamp 2450608 1433094416> 19:38:47.237836 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: S 696438232:696438232(0) ack 314746240 win 5792 <mss 1460,nop,nop,timestamp 2450623 1433094416,nop,wscale 2> 19:38:47.240764 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: . ack 511 win 1716 <nop,nop,timestamp 2450623 1433094416> 19:38:47.246044 IP 65.54.179.198.http > 10.7.40.50.49317: S 698796966:698796966(0) ack 4028979663 win 5792 <mss 1460,nop,nop,timestamp 2450625 1433094416,nop,wscale 2> 19:38:47.248673 IP 65.54.179.198.http > 10.7.40.50.49317: . ack 431 win 1716 <nop,nop,timestamp 2450625 1433094416> 19:38:47.411771 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: P 1:1172(1171) ack 511 win 1716 <nop,nop,timestamp 2450666 1433094416> 19:38:47.411892 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: F 1172:1172(0) ack 511 win 1716 <nop,nop,timestamp 2450666 1433094416> 19:38:47.420944 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: . ack 512 win 1716 <nop,nop,timestamp 2450668 1433094417> 19:38:47.423416 IP 65.54.179.198.http > 10.7.40.50.49317: P 1:558(557) ack 431 win 1716 <nop,nop,timestamp 2450669 1433094416> 19:38:47.438157 IP origin.gfx2.hotmail.com.http > 10.7.40.50.49299: P 10875:11468(593) ack 8373 win 6272 <nop,nop,timestamp 2450673 1433094417> 19:38:47.443483 IP 65.54.179.198.http > 10.7.40.50.49317: . ack 870 win 1984 <nop,nop,timestamp 2450674 1433094417> 19:38:47.618679 IP 65.54.179.198.http > 10.7.40.50.49317: P 558:783(225) ack 870 win 1984 <nop,nop,timestamp 2450718 1433094417> 19:38:47.618800 IP 65.54.179.198.http > 10.7.40.50.49317: F 783:783(0) ack 870 win 1984 <nop,nop,timestamp 2450718 1433094417> 19:38:47.630231 IP 65.54.179.198.http > 10.7.40.50.49317: . ack 871 win 1984 <nop,nop,timestamp 2450721 1433094417> 19:38:47.742822 IP 65.54.183.195.http > 10.7.40.50.49318: S 708063175:708063175(0) ack 2024656296 win 5792 <mss 1460,nop,nop,timestamp 2450749 1433094417,nop,wscale 2> 19:38:47.746643 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 492 win 1716 <nop,nop,timestamp 2450750 1433094417> 19:38:47.912705 IP 65.54.183.195.http > 10.7.40.50.49318: . 1:1449(1448) ack 492 win 1716 <nop,nop,timestamp 2450791 1433094417> 19:38:47.912720 IP 65.54.183.195.http > 10.7.40.50.49318: P 1449:1969(520) ack 492 win 1716 <nop,nop,timestamp 2450791 1433094417> 19:38:47.990188 IP 65.54.183.195.http > 10.7.40.50.49318: . 1969:3417(1448) ack 492 win 1716 <nop,nop,timestamp 2450811 1433094418> 19:38:47.990203 IP 65.54.183.195.http > 10.7.40.50.49318: P 3417:4705(1288) ack 492 win 1716 <nop,nop,timestamp 2450811 1433094418> 19:38:47.991494 IP 65.54.183.195.http > 10.7.40.50.49318: . 4705:6153(1448) ack 492 win 1716 <nop,nop,timestamp 2450811 1433094418> 19:38:47.992225 IP 65.54.183.195.http > 10.7.40.50.49318: P 6153:7489(1336) ack 492 win 1716 <nop,nop,timestamp 2450811 1433094418> 19:38:48.071065 IP 65.54.183.195.http > 10.7.40.50.49318: P 7489:8183(694) ack 492 win 1716 <nop,nop,timestamp 2450831 1433094418> 19:38:48.112410 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 927 win 1984 <nop,nop,timestamp 2450841 1433094418> 19:38:48.118084 IP 65.54.183.195.http > 10.7.40.50.49319: S 693003871:693003871(0) ack 2909579490 win 5792 <mss 1460,nop,nop,timestamp 2450843 1433094418,nop,wscale 2> 19:38:48.120651 IP 65.54.183.195.http > 10.7.40.50.49319: . ack 432 win 1716 <nop,nop,timestamp 2450843 1433094418> 19:38:48.275011 IP 65.54.183.195.http > 10.7.40.50.49318: . 8183:9631(1448) ack 927 win 1984 <nop,nop,timestamp 2450882 1433094418> 19:38:48.275022 IP 65.54.183.195.http > 10.7.40.50.49318: P 9631:10963(1332) ack 927 win 1984 <nop,nop,timestamp 2450882 1433094418> 19:38:48.283231 IP 65.54.183.195.http > 10.7.40.50.49319: . 1:1449(1448) ack 432 win 1716 <nop,nop,timestamp 2450884 1433094418> 19:38:48.283244 IP 65.54.183.195.http > 10.7.40.50.49319: P 1449:2781(1332) ack 432 win 1716 <nop,nop,timestamp 2450884 1433094418> 19:38:48.352642 IP 65.54.183.195.http > 10.7.40.50.49318: . 10963:12411(1448) ack 927 win 1984 <nop,nop,timestamp 2450901 1433094419> 19:38:48.352655 IP 65.54.183.195.http > 10.7.40.50.49318: . 12411:13859(1448) ack 927 win 1984 <nop,nop,timestamp 2450901 1433094419> 19:38:48.352664 IP 65.54.183.195.http > 10.7.40.50.49318: P 13859:15059(1200) ack 927 win 1984 <nop,nop,timestamp 2450901 1433094419> 19:38:48.354092 IP 65.54.183.195.http > 10.7.40.50.49318: P 15059:16483(1424) ack 927 win 1984 <nop,nop,timestamp 2450902 1433094419> 19:38:48.362619 IP 65.54.183.195.http > 10.7.40.50.49319: . 2781:4229(1448) ack 432 win 1716 <nop,nop,timestamp 2450904 1433094419> 19:38:48.362674 IP 65.54.183.195.http > 10.7.40.50.49319: . 4229:5677(1448) ack 432 win 1716 <nop,nop,timestamp 2450904 1433094419> 19:38:48.362705 IP 65.54.183.195.http > 10.7.40.50.49319: P 5677:6877(1200) ack 432 win 1716 <nop,nop,timestamp 2450904 1433094419> 19:38:48.363940 IP 65.54.183.195.http > 10.7.40.50.49319: P 6877:8253(1376) ack 432 win 1716 <nop,nop,timestamp 2450904 1433094419> 19:38:48.429243 IP 65.54.183.195.http > 10.7.40.50.49318: P 16483:17447(964) ack 927 win 1984 <nop,nop,timestamp 2450920 1433094419> 19:38:48.441056 IP 65.54.183.195.http > 10.7.40.50.49319: . 8253:9701(1448) ack 432 win 1716 <nop,nop,timestamp 2450923 1433094419> 19:38:48.441067 IP 65.54.183.195.http > 10.7.40.50.49319: . 9701:11149(1448) ack 432 win 1716 <nop,nop,timestamp 2450923 1433094419> 19:38:48.441766 IP 65.54.183.195.http > 10.7.40.50.49319: P 11149:12349(1200) ack 432 win 1716 <nop,nop,timestamp 2450924 1433094419> 19:38:48.442925 IP 65.54.183.195.http > 10.7.40.50.49319: P 12349:13264(915) ack 432 win 1716 <nop,nop,timestamp 2450924 1433094419> 19:38:48.513818 IP 65.54.183.195.http > 10.7.40.50.49319: . ack 926 win 1984 <nop,nop,timestamp 2450942 1433094419> 19:38:48.527909 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 1432 win 2252 <nop,nop,timestamp 2450945 1433094419> 19:38:48.535728 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: S 701038677:701038677(0) ack 715570296 win 5792 <mss 1460,nop,nop,timestamp 2450947 1433094419,nop,wscale 2> 19:38:48.538417 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: . ack 516 win 1716 <nop,nop,timestamp 2450948 1433094419> 19:38:48.543263 IP 65.54.183.195.http > 10.7.40.50.49321: S 694624704:694624704(0) ack 2139437339 win 5792 <mss 1460,nop,nop,timestamp 2450949 1433094419,nop,wscale 2> 19:38:48.545732 IP 65.54.183.195.http > 10.7.40.50.49321: . ack 414 win 1716 <nop,nop,timestamp 2450950 1433094419> 19:38:48.677020 IP 65.54.183.195.http > 10.7.40.50.49319: P 13264:13674(410) ack 926 win 1984 <nop,nop,timestamp 2450982 1433094419> 19:38:48.678182 IP 65.54.183.195.http > 10.7.40.50.49319: . 13674:15122(1448) ack 926 win 1984 <nop,nop,timestamp 2450983 1433094419> 19:38:48.678190 IP 65.54.183.195.http > 10.7.40.50.49319: P 15122:15663(541) ack 926 win 1984 <nop,nop,timestamp 2450983 1433094419> 19:38:48.684495 IP 65.54.179.198.http > 10.7.40.50.49322: S 697704132:697704132(0) ack 2904972691 win 5792 <mss 1460,nop,nop,timestamp 2450984 1433094419,nop,wscale 2> 19:38:48.687243 IP 65.54.179.198.http > 10.7.40.50.49322: . ack 436 win 1716 <nop,nop,timestamp 2450985 1433094419> 19:38:48.690973 IP 65.54.183.195.http > 10.7.40.50.49318: P 17447:18666(1219) ack 1432 win 2252 <nop,nop,timestamp 2450986 1433094419> 19:38:48.699720 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 1855 win 2520 <nop,nop,timestamp 2450988 1433094419> 19:38:48.702287 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: P 1:1172(1171) ack 516 win 1716 <nop,nop,timestamp 2450989 1433094419> 19:38:48.702556 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: F 1172:1172(0) ack 516 win 1716 <nop,nop,timestamp 2450989 1433094419> 19:38:48.708788 IP 65.54.183.195.http > 10.7.40.50.49321: P 1:403(402) ack 414 win 1716 <nop,nop,timestamp 2450990 1433094419> 19:38:48.862768 IP 65.54.183.195.http > 10.7.40.50.49318: P 18666:20073(1407) ack 1855 win 2520 <nop,nop,timestamp 2451029 1433094419> 19:38:48.863869 IP 65.54.179.198.http > 10.7.40.50.49322: P 1:558(557) ack 436 win 1716 <nop,nop,timestamp 2451029 1433094419> 19:38:48.905357 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: . ack 517 win 1716 <nop,nop,timestamp 2451039 1433094420> 19:38:48.928965 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 2286 win 2788 <nop,nop,timestamp 2451045 1433094420> 19:38:48.928988 IP 65.54.183.195.http > 10.7.40.50.49319: . ack 1392 win 2252 <nop,nop,timestamp 2451045 1433094420> 19:38:48.929018 IP 65.54.183.195.http > 10.7.40.50.49321: . ack 836 win 1984 <nop,nop,timestamp 2451045 1433094420> 19:38:48.963482 IP origin.gfx1.hotmail.com.http > 10.7.40.50.49323: S 696478005:696478005(0) ack 2287221538 win 5792 <mss 1460,nop,nop,timestamp 2451054 1433094420,nop,wscale 2> 19:38:48.966486 IP origin.gfx1.hotmail.com.http > 10.7.40.50.49323: . ack 346 win 1716 <nop,nop,timestamp 2451055 1433094420> 19:38:48.969076 IP origin.gfx1.hotmail.com.http > 10.7.40.50.49323: P 1:518(517) ack 346 win 1716 <nop,nop,timestamp 2451055 1433094420> 19:38:48.973080 IP 65.54.183.195.http > 10.7.40.50.49324: S 696883400:696883400(0) ack 1194369896 win 5792 <mss 1460,nop,nop,timestamp 2451056 1433094420,nop,wscale 2> 19:38:48.975562 IP 65.54.183.195.http > 10.7.40.50.49324: . ack 481 win 1716 <nop,nop,timestamp 2451057 1433094420> 19:38:49.089130 IP 65.54.183.195.http > 10.7.40.50.49318: P 20073:21459(1386) ack 2286 win 2788 <nop,nop,timestamp 2451085 1433094420> 19:38:49.089251 IP 65.54.183.195.http > 10.7.40.50.49321: P 403:1805(1402) ack 836 win 1984 <nop,nop,timestamp 2451085 1433094420> 19:38:49.090737 IP 65.54.183.195.http > 10.7.40.50.49319: . 15663:17111(1448) ack 1392 win 2252 <nop,nop,timestamp 2451086 1433094420> 19:38:49.090748 IP 65.54.183.195.http > 10.7.40.50.49319: P 17111:17567(456) ack 1392 win 2252 <nop,nop,timestamp 2451086 1433094420> 19:38:49.117003 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 2771 win 3056 <nop,nop,timestamp 2451092 1433094420> 19:38:49.117174 IP 65.54.179.198.http > 10.7.40.50.49322: . ack 880 win 1984 <nop,nop,timestamp 2451092 1433094420> 19:38:49.121709 IP passportimages.com.http > 10.7.40.50.49325: S 705429775:705429775(0) ack 4157335157 win 5792 <mss 1460,nop,nop,timestamp 2451094 1433094420,nop,wscale 2> 19:38:49.124152 IP passportimages.com.http > 10.7.40.50.49325: . ack 412 win 1716 <nop,nop,timestamp 2451094 1433094420> 19:38:49.136250 IP 65.54.183.195.http > 10.7.40.50.49324: . 1:1449(1448) ack 481 win 1716 <nop,nop,timestamp 2451097 1433094420> 19:38:49.136264 IP 65.54.183.195.http > 10.7.40.50.49324: P 1449:2781(1332) ack 481 win 1716 <nop,nop,timestamp 2451097 1433094420> 19:38:49.215094 IP 65.54.183.195.http > 10.7.40.50.49324: P 2781:4190(1409) ack 481 win 1716 <nop,nop,timestamp 2451117 1433094420> 19:38:49.258704 IP passportimages.com.http > 10.7.40.50.49325: . 1:1449(1448) ack 412 win 1716 <nop,nop,timestamp 2451128 1433094420> 19:38:49.258718 IP passportimages.com.http > 10.7.40.50.49325: P 1449:1991(542) ack 412 win 1716 <nop,nop,timestamp 2451128 1433094420> 19:38:49.279094 IP 65.54.183.195.http > 10.7.40.50.49318: . 21459:22907(1448) ack 2771 win 3056 <nop,nop,timestamp 2451133 1433094420> 19:38:49.279105 IP 65.54.183.195.http > 10.7.40.50.49318: P 22907:24239(1332) ack 2771 win 3056 <nop,nop,timestamp 2451133 1433094420> 19:38:49.292880 IP 65.54.179.198.http > 10.7.40.50.49322: P 558:783(225) ack 880 win 1984 <nop,nop,timestamp 2451136 1433094420> 19:38:49.293130 IP 65.54.179.198.http > 10.7.40.50.49322: F 783:783(0) ack 880 win 1984 <nop,nop,timestamp 2451136 1433094420> 19:38:49.294899 IP 65.54.179.198.http > 10.7.40.50.49322: . ack 881 win 1984 <nop,nop,timestamp 2451137 1433094421> 19:38:49.342677 IP 65.54.183.195.http > 10.7.40.50.49324: . ack 963 win 1984 <nop,nop,timestamp 2451149 1433094421> 19:38:49.356165 IP 65.54.183.195.http > 10.7.40.50.49318: . 24239:25687(1448) ack 2771 win 3056 <nop,nop,timestamp 2451152 1433094421> 19:38:49.356179 IP 65.54.183.195.http > 10.7.40.50.49318: . 25687:27135(1448) ack 2771 win 3056 <nop,nop,timestamp 2451152 1433094421> 19:38:49.356189 IP 65.54.183.195.http > 10.7.40.50.49318: P 27135:28335(1200) ack 2771 win 3056 <nop,nop,timestamp 2451152 1433094421> 19:38:49.357327 IP 65.54.183.195.http > 10.7.40.50.49318: P 28335:29557(1222) ack 2771 win 3056 <nop,nop,timestamp 2451152 1433094421> 19:38:49.503832 IP 65.54.183.195.http > 10.7.40.50.49324: . 4190:5638(1448) ack 963 win 1984 <nop,nop,timestamp 2451189 1433094421> 19:38:49.503843 IP 65.54.183.195.http > 10.7.40.50.49324: P 5638:5878(240) ack 963 win 1984 <nop,nop,timestamp 2451189 1433094421> 19:38:49.504676 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 3209 win 3324 <nop,nop,timestamp 2451189 1433094421> 19:38:49.665590 IP 65.54.183.195.http > 10.7.40.50.49318: P 29557:30960(1403) ack 3209 win 3324 <nop,nop,timestamp 2451229 1433094421> I'm not too sure what to make of it... Thanks, Bryan -----Original Message----- From: Henrik Nordstrom [mailto:henrik@xxxxxxxxxxxxxxxxxxx] Sent: March 16, 2006 11:10 AM To: Shoebottom, Bryan Cc: squid-users@xxxxxxxxxxxxxxx Subject: RE: Hotmail login issue tor 2006-03-16 klockan 10:16 -0500 skrev Shoebottom, Bryan: > Thanks for the info, but I don't understand why this would be an > intermittent issue? How come sometimes a client can login to hotmail, > and other times it can't. Can be many reasons. What does the replies from hotmail look like for the troublesome clients? Any hints if looking at the traffic with tcpdump? > I've had a couple client point directly to the cache and so far they > haven't had any problems. They are point to port 80 and are going > through the iptables redirect rule. With this information, it would > seem that the error lies around the GRE/WCCP portion of the setup. > Could it be possible that WCCP is causing these errors? WCCP (and transparent interception in general) is a hack, violating fundamentals of TCP/IP, and as such do cause problems, but usually not this kind of problems.. Regards Henrik
