It turned that the problem wasn't due Squid but to the ICAP Server we used, which closed the connection after a "204" response although it didn't send the "Connection: close" header. -----Original Message----- From: Alon Halimi [mailto:Alon.Halimi@xxxxxxxxxxx] Sent: Monday, 07 August 2006 09:14 To: squid-users@xxxxxxxxxxxxxxx Subject: Suspected bug - problems loading images with ICAP Hi, While trying to load pages web pages via Squid with ICAP respmod & reqmod enabled, parts of the page often fail to load (css/images). Squid reports ICAP error 113. However, the response from the ICAP server to both ICAP Reqmod and Respmod requests are valid (we analyzed it using Ethereal) Note: The problem did not happen when respmod is disabled. Information: ------------- Version: Squid Stable11+ICAP+Null cache. Configuration mainlines: no caching (including no memory caching), icap resp/reqmod on all traffic. Producted on platforms: Windows XP(Cygwin), Linux CentOS 4 (2.6.9-22.EL). Configuration file: --------------------- debug_options ALL,1 hierarchy_stoplist cgi-bin ? minimum_object_size 1000 MB maximum_object_size 0 maximum_object_size_in_memory 0 acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY acl all src 0/0 no_cache deny all cache_dir null /null cache_access_log /usr/local/squid/var/logs/access.log debug_options ALL,1 #dns_nameservers localhost hosts_file /etc/hosts refresh_pattern . 0 0 0 negative_ttl 0 minutes acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow all http_reply_access allow all icp_access allow all icap_enable on icap_preview_enable off icap_preview_size -1 icap_service service_1 reqmod_precache 0 icap://1.1.1.1:1344/reqmod icap_service service_2 respmod_precache 0 icap://1.1.1.1:1344/respmod icap_class class_2 service_1 service_2 icap_send_client_ip on server_persistent_connections off icap_access class_2 allow all icap_check_interval 10 append_domain .unipier.com coredump_dir /usr/local/squid/var/cache visible_hostname test Some Debug Info: ---------------- 2006/08/03 10:49:44| packing hdr: (0xf1d550) 2006/08/03 10:49:44| icapSendReqMod: FD 12 writing {REQMOD icap://127.0.0.1:1344/reqmod ICAP/1.0 Encapsulated: req-hdr=0, null-body=952 X-Client-IP: 127.0.0.1 GET http://news.bbc.co.uk/mobile/bbc_news/INTERNAL__REDIRECT_URL_PARAM_11545 94982403_1168 HTTP/1.1 User-Agent: Nokia6600/1.0 (3.42.1) SymbianOS/7.0s Series60/2.0 Profile/MIDP-2.0 Configuration/CLDC-1.0 Host: news.bbc.co.uk Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1 Accept-Language: en Accept-Charset: windows-1252, utf-8, utf-16, iso-8859-1;q=0.6, *;q=0.1 Accept-Encoding: gzip, deflate Referer: http://news.bbc.co.uk/mobile/bbc_news/INTERNAL__REDIRECT_URL_PARAM_11545 94982403_1168 Cookie: JSESSIONID=GRrZVZTdSzbsVnLTfvGQJhvhRSpykLxYnLLf4mQp2QWLRpx1M9ff!11425930 67; BBC-UID=547498154443f0adf9ffd1dae1942949b18c6feb40c0e0ae57bfd72da821dd2f 0Nokia6600; BBCNewsAudience=International; BBCNewsAudcWght=-99 Cookie2: $Version=1 TE: deflate, gzip, chunked, identity, trailers X-Forwarded-For: 172.16.50.79 X-MSISDN: +972545425868 X-Nokia-MSISDN: +972545425868 } 2006/08/03 10:49:44| comm_write: FD 12: sz 1064: hndl 0x442e00: data 0xf1e530. 2006/08/03 10:49:44| cbdataLock: 0xf1e530 2006/08/03 10:49:44| commSetSelect: FD 12 type 2 2006/08/03 10:49:44| icapReqModStart: returning 0xf1e530 2006/08/03 10:49:44| cbdataLock: 0xf1e530 2006/08/03 10:49:44| cbdataUnlock: 0xf1df00 2006/08/03 10:49:44| cbdataUnlock: 0xf1d6f8 2006/08/03 10:49:44| cbdataFree: 0x7911f8 2006/08/03 10:49:44| cbdataFree: Freeing 0x7911f8 2006/08/03 10:49:44| cbdataUnlock: 0xf1df00 2006/08/03 10:49:44| cbdataUnlock: 0xf1d6f8 2006/08/03 10:49:44| cbdataFree: 0x790d60 2006/08/03 10:49:44| cbdataFree: Freeing 0x790d60 2006/08/03 10:49:44| cbdataValid: 0xf1d6f8 2006/08/03 10:49:44| cbdataUnlock: 0xf1d6f8 2006/08/03 10:49:44| comm_poll: FD 12 ready for reading 2006/08/03 10:49:44| comm_poll: 1+0 FDs ready 2006/08/03 10:49:44| comm_poll: FD 12 ready for writing 2006/08/03 10:49:44| commHandleWrite: FD 12: off 0, sz 1064. 2006/08/03 10:49:44| commHandleWrite: write() returns 1064 2006/08/03 10:49:44| cbdataValid: 0xf1e530 2006/08/03 10:49:44| icapSendReqModDone: FD 12: size 1064: errflag 0. 2006/08/03 10:49:44| commSetSelect: FD 12 type 1 2006/08/03 10:49:44| commSetTimeout: FD 12 timeout 900 2006/08/03 10:49:44| cbdataUnlock: 0xf1e530 2006/08/03 10:49:44| comm_poll: 1+0 FDs ready 2006/08/03 10:49:44| comm_poll: FD 12 ready for reading 2006/08/03 10:49:44| icapReqModReadIcapPart: FD 12 httpState = 0xf1e530 2006/08/03 10:49:44| recv(FD 12, ..., MSG_PEEK) ret -1 2006/08/03 10:49:44| icapReadHeader: FD 12 recv error: (113) Software caused connection abort 2006/08/03 10:49:44| ICAP : Error path! Alon Halimi Team Leader Unipier Ltd. (formerly Cash-U) *********************************************** Tel: +972 9 8920888 Fax: +972 9 8920800 Mobile: +972 54 5669304 45 Hamelacha st. Netanya 36880, Israel http://www.unipier.com ***********************************************