Henrik/Amos, Did you get the tcpdumps? Is there anything else I can do to help debug this problem? Jeff F> 2010/2/14 Jeff Foster > I am sending 2 tcpdump files as attachments to you, Henrik, and Amos plus the > mail list. I expect the mailing list will remove the attachments so I > hope you both > receive the attachments. If that doesn't work I can upload to a web > server so you > can download them. > > The dumps are: > Stutt.3.cap - A squid 3.1.0.16 capture > Stutt.4.cap - A squid 2.7.STABLE7 capture > > The previous email were discussing the 3.1.0.16 capture, but the 2.7 capture > also has the same issue. > > > Jeff F> > > > 2010/2/13 Henrik Nordström >> Can you please extend the trace to include the following two pieces of >> information as well: >> >> * The response. Both status code, and in case of 407 if there is an >> NTLMSSP_CHALLLENGE blob or just the scheme name.. >> >> * Who closes the connection first (FIN) >> >> lör 2010-02-13 klockan 14:17 -0600 skrev Jeff Foster: >>> Client Packet summary >>> No. Time Src Info >>> 7 0.001648 1916 GET http://simon/efms/ HTTP/1.0 >>> 16 0.559067 1916 GET http://simon/efms/ HTTP/1.0, NTLMSSP_NEGOTIATE >>> 21 0.752159 1916 GET http://simon/efms/ HTTP/1.0, NTLMSSP_AUTH, User: WG >>> 42 1.576078 1917 GET http://simon/efms/ HTTP/1.0 >>> 65 1.961280 1917 GET http://simon/efms/ HTTP/1.0, NTLMSSP_NEGOTIATE >>> 70 2.151384 1917 GET http://simon/efms/ HTTP/1.0, NTLMSSP_AUTH, User: WG >>> 85 2.991803 1918 GET http://simon/EFMS/efms.js HTTP/1.0 >>> 144 3.370616 1918 GET http://simon/EFMS/efms.js HTTP/1.0, NTLMSSP_NEGOTIA >>> 157 3.560971 1918 GET http://simon/EFMS/efms.js HTTP/1.0, NTLMSSP_AUTH, U >>> 163 3.780493 1918 GET http://simon/EFMS/efms.css HTTP/1.0 >>> 171 3.781469 1919 GET http://simon/Styles/perry_fix_font.css HTTP/1.0 >>> 174 3.781643 1920 GET http://simon/Styles/forms.css HTTP/1.0 >>> 179 3.782358 1921 GET http://simon/styles/dashboard.css HTTP/1.0 >>> 195 3.969630 1918 GET http://simon/javascript/std.js HTTP/1.0 >>> 207 4.161036 1919 GET http://simon/EFMS/efms.css HTTP/1.0, NTLMSSP_NEGOTI >>> >>> Server (upstream) packet summary >>> No. Time Src Info >>> 12 0.369931 37156 GET /efms/ HTTP/1.0 >>> 18 0.559496 37156 GET /efms/ HTTP/1.0, NTLMSSP_NEGOTIATE >>> 23 0.752534 37156 GET /efms/ HTTP/1.0, NTLMSSP_AUTH, User: WGC\jfoste >>> 61 1.758489 37157 GET /efms/ HTTP/1.0 >>> 67 1.961708 37157 GET /efms/ HTTP/1.0, NTLMSSP_NEGOTIATE >>> 72 2.152100 37157 GET /efms/ HTTP/1.0, NTLMSSP_AUTH, User: WGC\jfoste >>> 113 3.180079 37158 GET /EFMS/efms.js HTTP/1.0 >>> 146 3.371116 37158 GET /EFMS/efms.js HTTP/1.0, NTLMSSP_NEGOTIATE >>> 159 3.561335 37158 GET /EFMS/efms.js HTTP/1.0, NTLMSSP_AUTH, User: WGC\jfo >>> 168 3.781256 37158 GET /EFMS/efms.css HTTP/1.0 >>> 190 3.967221 37159 GET /Styles/perry_fix_font.css HTTP/1.0 >>> 191 3.967513 37160 GET /Styles/forms.css HTTP/1.0 >>> 192 3.967791 37161 GET /styles/dashboard.css HTTP/1.0 >>> 197 3.970336 37158 GET /javascript/std.js HTTP/1.0 >>> 210 4.161855 37161 GET /EFMS/efms.css HTTP/1.0, NTLMSSP_NEGOTIATE >>> >>> Jeff F> >> >> >