On 1/12/2013 11:07 p.m., janwen wrote: > tcpdump on squid server get follow: > janwen@ubuntu:/usr/local/squid$ sudo tcpdump -i any 'port 3128' > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 > bytes > > and then telnet from client,squid server output follow:it seems that the > request connect to squid server,but client shows Connection timed out. > and i use my google chrome to connect the squid server,it's not work. > > > 10:05:46.555224 IP xxx .57922 > ubuntu.San.3128: Flags [S], seq > 2416550145, win 14600, options [mss 1460,sackOK,TS val 422202410 ecr > 0,nop,wscale 7], length 0 > 10:05:46.555271 IP ubuntu.San.3128 > 222.73.112.140.57922: Flags [S.], > seq 1908335791, ack 2416550146, win 14480, options [mss 1460,sackOK,TS > val 3545032717 ecr 422202410,nop,wscale 8], length 0 This means that the TCP SYN packet got to Squid and was accept()'ed. The SYN-ACK packet sent back to the client. >From what you are describing it would seem that SYN-ACK packet never arrives to the client. What does that tell you? Amos