On 06/30/2017 03:35 AM, joseph wrote: > i have over then 10000 daily this error befor was 0 or at least not much > using squid 5 latest patch up to r15228 > my setup same nothing change What Squid version did you run "before"? > ps.. all my client produce this > > 1498793967.385 0 10.3.252.229 NONE/000 0 NONE > error:transaction-end-before-headers - HIER_NONE/- - These errors are meant to be logged for clients that open and close connections without sending any HTTP headers (or without sending complete HTTP headers -- you can log HTTP request size to distinguish these two cases). I do not know whether Squid has a bug identifying these cases or you just have a lot of these cases in your environment. If these are frequent, then you should be able to learn more about them by capturing network packets and matching them with the errors. Logging the client/source TCP port number would help with that. There are a couple of known problems with the detection code, but if this is some new/unknown problem, it would be useful for developers to know more about it. Please investigate if you can. I do not know whether it is possible to match these cases with existing ACLs so that you can stop logging them (if that is what you want). Adding an ACL for this purpose is a known TODO, but I am not aware of anybody working on that or sponsoring that work. If you want to modify Squid to stop logging these cases, add "return;" at the very beginning of ConnStateData::checkLogging() in src/client_side.cc. You forgot to ask a question, but I hope the above info is useful. HTH, Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users