April 19, 2024, 01:12:22 AM

News : LinuxSolved.com Linux Help Community Forum..


Author Topic: buffer overflow in squid  (Read 8693 times)

Offline klakshman03

  • Tux Awared
  • **
  • Posts: 35
buffer overflow in squid
« on: December 15, 2007, 04:17:08 AM »
 
 Hi Grp

 We have squid  (squid-2.6.STABLE6-3.el5 ) server in RHEL 5  ( 2.6.18-8.el5 ).
 Now a days some times internet is going to down due to squid problem , if i check the service at that moment ,service is running. If i restart the squid service once , internet is getting up . I checked the logs both access and cache logs

[root@proxy ~]# cat /var/log/squid/access.log | grep overflow | more

1197279648.752    304 192.168.28.116 TCP_MISS/200 2897 GET http://images.apple.com/downloads/macosx/productivity_tools/images
/overflow_20070608161303-thumb.jpg - DIRECT/images.apple.com image/jpeg
1197386815.256    614 192.168.28.116 TCP_REFRESH_HIT/200 2895 GET http://images.apple.com/downloads/macosx/productivity_tools
/images/overflow_20070608161303-thumb.jpg - DIRECT/images.apple.com image/jpeg
14/Dec/2007:12:40:18 +0530 1197616218.862   1866 172.16.1.244 TCP_MISS/200 26150 GET http://images.apple.com/iphone/images/20
07/06/videos_coverflow.jpg - DIRECT/images.apple.com image/jpeg
15/Dec/2007:00:51:56 +0530 1197660116.629   1112 192.168.12.115 TCP_MISS/200 1833 GET http://motifcdn2.doubleclick.net/NAM/mo
tif339/dartjavascript/modifyoverflow/modifyOverflow_v2.js - DIRECT/motifcdn2.doubleclick.net application/x-javascript
15/Dec/2007:01:30:28 +0530 1197662428.793   1205 192.168.12.115 TCP_REFRESH_HIT/304 239 GET http://motifcdn2.doubleclick.net/
NAM/motif339/dartjavascript/modifyoverflow/modifyOverflow_v2.js - DIRECT/motifcdn2.doubleclick.net -
15/Dec/2007:01:53:15 +0530 1197663795.844    275 192.168.12.115 TCP_IMS_HIT/304 388 GET http://motifcdn2.doubleclick.net/NAM/
motif339/dartjavascript/modifyoverflow/modifyOverflow_v2.js - NONE/- application/x-javascript
15/Dec/2007:09:02:30 +0530 1197689550.995    353 192.168.36.152 TCP_MISS/200 9285 GET http://images.apple.com/mac/home/images
/2007/10/promo_findercoverflow_20071016.jpg - DIRECT/images.apple.com image/jpeg
15/Dec/2007:09:03:16 +0530 1197689596.906    682 192.168.36.152 TCP_MISS/200 10742 GET http://www.apple.com/au/ipodclassic/im
ages/overviewfeature_coverflow20070905.png - DIRECT/www.apple.com image/png

[root@proxy ~]#
[root@proxy ~]# cat /var/log/squid/access.log | grep buffer | more
1197191307.242   2120 192.168.28.104 TCP_MISS/200 628 GET http://www.raaga.com/playerV31/image/status_buffer.gif - DIRECT/www
.raaga.com image/gif
1197193702.959    834 172.16.2.204 TCP_MISS/200 521 GET http://nccs.gov/img/buffer.gif - DIRECT/nccs.gov image/gif
1197199133.805      2 192.168.36.136 TCP_MEM_HIT/200 637 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197200036.044      1 192.168.36.136 TCP_IMS_HIT/304 347 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197200362.322     89 192.168.36.136 TCP_IMS_HIT/304 347 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197261678.243      1 192.168.32.176 TCP_IMS_HIT/304 348 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197261752.072      2 192.168.32.176 TCP_IMS_HIT/304 348 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197272791.639      7 192.168.36.136 TCP_IMS_HIT/304 348 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197272827.766      9 192.168.36.136 TCP_IMS_HIT/304 348 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197274737.824      1 192.168.36.136 TCP_IMS_HIT/304 348 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197275211.166      5 192.168.36.136 TCP_IMS_HIT/304 348 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197276498.467      5 192.168.36.136 TCP_IMS_HIT/304 348 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197277097.588     36 192.168.36.136 TCP_IMS_HIT/304 348 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197298797.786      7 192.168.36.136 TCP_IMS_HIT/304 349 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197299406.939      1 192.168.36.140 TCP_MEM_HIT/200 639 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif
1197313248.422      1 192.168.28.104 TCP_MEM_HIT/200 639 GET http://www.raaga.com/playerV31/image/status_buffer.gif - NONE/-
image/gif


[root@proxy ~]# cat /var/log/squid/access.log | grep error | more
1197187625.279   2237 192.168.32.140 TCP_MISS/302 1350 GET http://scitation.aip.org/error/cookies.jsp? - DIRECT/scitation.aip
.org text/html
1197187822.108   1950 192.168.12.110 TCP_MISS/200 1391 GET http://www.nasa.gov/error/HP_Error-rd.html - DIRECT/www.nasa.gov t
ext/html
1197188673.026   4918 192.168.12.110 TCP_MISS/200 1725 GET http://www.nasa.gov/error/HP_Error-rd.html - DIRECT/www.nasa.gov t
ext/html
1197190144.882      4 192.168.36.150 TCP_DENIED/400 1334 NONE error:unsupported-request-method - NONE/- text/html
1197190256.002   2863 192.168.12.110 TCP_MISS/200 751 GET http://www.nasa.gov/error/HP_Error-rd.html - DIRECT/www.nasa.gov te
xt/html
1197190660.617   1014 172.16.2.201 TCP_MISS/200 1756 GET http://authors.iop.org/atom/usermgmt.nsf/weberror.gif? - DIRECT/auth
ors.iop.org image/gif
1197191726.922    624 192.168.12.110 TCP_MISS/200 7394 GET http://www.nasa.gov/error/HP_Error-rd.html - DIRECT/www.nasa.gov t
ext/html
1197192336.750    775 172.16.1.35 TCP_MISS/200 408 GET http://195.161.119.239/images/onerror/118_1x1.gif - DIRECT/195.161.119
.239 image/gif
1197192443.512    304 192.168.12.125 TCP_MISS/200 722 GET http://us.js2.yimg.com/us.js.yimg.com/i/ww/t9/error_bckgrnd.gif - D
IRECT/us.js2.yimg.com image/gif
1197193003.889   6672 192.168.28.102 TCP_MISS/302 1612 GET http://scitation.aip.org/error/cookies.jsp? - DIRECT/scitation.aip
.org text/html
1197193530.834     49 192.168.12.110 TCP_MISS/200 7394 GET http://www.nasa.gov/error/HP_Error-rd.html - DIRECT/www.nasa.gov t
ext/html
1197194734.772    174 192.168.12.110 TCP_MISS/200 7394 GET http://www.nasa.gov/error/HP_Error-rd.html - DIRECT/www.nasa.gov t
ext/html
1197196543.987    583 192.168.12.110 TCP_MISS/200 7394 GET http://www.nasa.gov/error/HP_Error-rd.html - DIRECT/www.nasa.gov t
ext/html
1197196848.795     55 192.168.36.136 TCP_MEM_HIT/200 731 GET http://us.js2.yimg.com/us.js.yimg.com/i/ww/t9/error_bckgrnd.gif
- NONE/- image/gif
1197196848.916    176 192.168.36.136 TCP_MISS/000 0 GET http://us.i1.yimg.com/us.yimg.com/i/ww/sp/error_msg.gif - DIRECT/us.i
1.yimg.com -
1197197749.692    358 192.168.12.110 TCP_MISS/200 7394 GET http://www.nasa.gov/error/HP_Error-rd.html - DIRECT/www.nasa.gov t
ext/html
1197199555.633    733 192.168.12.110 TCP_MISS/200 7394 GET http://www.nasa.gov/error/HP_Error-rd.html - DIRECT/www.nasa.gov t
ext/html


Pls suggest a solution to resolve the issue

Offline Ricky

  • LST CareTaker
  • Specially Skilled
  • *****
  • Posts: 2381
Re: buffer overflow in squid
« Reply #1 on: December 18, 2007, 06:52:22 AM »
Where is cache.log ?