On 10/11/06, Tom Warren <funkknob@xxxxxxxxx> wrote:
Hi Gonzalo! On 10/11/06, Gonzalo Arana <gonzalo.arana@xxxxxxxxx> wrote: > Hi, > > What kinds of errors are you getting? Timeouts? It depends on which browser and which site, but with MSN we're getting 'connection reset' on Firefox and 'page cannot be displayed' on IE. With gmail we can log in but when we click on an inbox message using Firefox, 'loading...' is displayed but it just hangs there; with IE we get 'page cannot be displayed.' With Yahoo mail we can log in and read and compose messages, but get a blank page after pressing 'send.'
the http status of the response is quite useful. Try searching in access logs for the lines of the requests that fail.
> Anything in your cache.log? There's nothing in cache.log related to the problem. > Try to get the access.log lines that represent the problem. Here are some examples from Gmail: 11/Oct/2006:16:23:07 +0700.740 212 xxx.yyy.24.34 TCP_MISS/204 240 GET http://www.google.com/setgmail? - DIRECT/64.233.189.104 text/html 11/Oct/2006:16:23:08 +0700.687 1038 xxx.yyy.24.34 TCP_MISS/200 385 GET http://chatenabled.mail.google.com/mail/images/cleardot.gif? - DIRECT/64.233.163.189 image/gif Those are the only lines that show up when we click on a message in the inbox.
204 No content and 200 OK they seem ok to me.
> > Here is a minimal troubleshooting guide: > > 1) Try to access them without squid, using any web browser (explorer, firefox). This always works with both browsers. Also works if we set the browser's proxy settings to point directly to Squid.
this suggests to look into wccp. Any wccp guru around?
> 2) Try to access using elinks (text browser with some javascript & > frames support) from a squid server without wccp. When signing into gmail using elinks from the cache, I get 'The page you requested is invalid.' Hotmail gives a message about javascript; I couldn't figure out how to enable it in elinks. > 3) Try to access them using plain old telnet without wccp (just to > test your TCP stack, perhaps you may have a broken tcp timestamps > implementation, for instance).
Cache-Control: private Content-Encoding: gzip Content-Length: 12254 ³QtpU?uP??7v?w qQ?Q0?.)?.?w?))°?///?7?/J? ???e?¤(??????·UJ?--VR@??nhii 1dPjb??MnjI"?%º(c)?¥?e¶J?y%(c)y%º!?(c)J
The "garbage" you see is the content of the response compressed with gzip (as instructed in 'Content-Encoding: gzip' response header). The web server sends the response compressed because you instructed it that it is ok to send gzipped responses by sending 'Accept-Encoding: gzip, deflate' in request.
........Lots of garbage follows. BTW how can I reset my terminal to get rid of the garbage text without logging out?
try with echo -ne '\033c'
> 4) Try to access them using telnet from your Cisco 7206 using > different ip source address (to discard routing problems). Similar result:
so routing problems may be discarded.
Content-Length: 12253
But it looks like the content length is one byte off?
most likely the content have changed.
Also here's some tcpdump output when trying to connect to MSN:
17:29:28.653892 IP xxx.yyy.24.34.1700 > 207.68.173.76.http: S 1196943964:1196943964(0) win 65535 <mss 1460,nop,nop,sackOK> 17:29:28.653923 IP 207.68.173.76.http > xxx.yyy.24.34.1700: S 3187314926:3187314926(0) ack 1196943965 win 5840 <mss 1460,nop,nop,sackOK> 17:29:28.654640 IP xxx.yyy.24.34.1700 > 207.68.173.76.http: . ack 3187314927 win 65535
the above 3 packets are TCP connection establishment
17:29:28.673760 IP xxx.yyy.24.34.1700 > 207.68.173.76.http: P 1460:1730(270) ack 1 win 65535
this is the request (270 bytes long)
17:29:28.673777 IP 207.68.173.76.http > xxx.yyy.24.34.1700: . ack 1 win 5840 <nop,nop,sack sack 1 {1461:1731} >
This is the web server ACK of the request, but the response is missing. My guess is that this is a wccp related problem. Unfortunately, I've never used wccp and I am not aware of how it works. Hope someone else can help you. Regards, -- Gonzalo A. Arana