[squid-users] Request header is too large

From: sk <[email protected]>
Date: Tue, 7 Dec 2004 19:26:38 +0700

Hi

I'm facing this same problem of Header size from many customers, but most of
them use PPPOE . For some of them wccp does not work, so they are asked to
configure the proxy in their browser. Does this cause them from being able
to browse( because many i had to bypass from wccp ).

Have been upgrading my squid as soon as you release newer versions. Now with
2.5.7 and all patches,

with request_header_max at 50 Kb. still during some periods of day i get
more than 400 messages/hour like this

Dec 3 09:58:40 proxy-01 squid[3790]: Request header is too large (52560
bytes)

Dec 3 09:58:40 proxy-01 squid[3790]: Config 'request_header_max_size'= 51200
bytes.

Dec 3 09:58:41 proxy-01 squid[3790]: Request header is too large (52560
bytes)

Dec 3 09:58:41 proxy-01 squid[3790]: Config 'request_header_max_size'= 51200
bytes.

grep " [0-9][0-9][0-9][0-9][0-9]/*" access.log

1102156576.872 3791 203.189.138.89 TCP_MISS/200 55470 GET
http://thailand.clubhombre.com/EdenClub.jpg - DIRECT/66.70.36.244 image/jpeg

1102156580.581 4051 203.189.138.86 TCP_MISS/200 51580 GET
http://web.peykeiran.com/net_public/irtitles.aspx - DIRECT/62.119.28.161
text/html

1102156583.047 1857 203.189.136.204 TCP_MISS/200 58970 GET
http://office.microsoft.com/clipart/results.aspx? - DIRECT/65.54.206.30
text/html

1102156591.401 1502 203.189.136.204 TCP_MISS/200 58986 GET
http://office.microsoft.com/clipart/results.aspx? - DIRECT/65.54.206.30
text/html

...........

Just a clip of output .....

How do i capture the trouble maker. Does this contribute to my squid running
at 99% with just 100 hits/sec on a dual Xeon3.06 with 2.5G.
Received on Tue Dec 07 2004 - 05:26:38 MST

This archive was generated by hypermail pre-2.1.9 : Sat Jan 01 2005 - 12:00:01 MST