RE: [squid-users] Hotmail login issue

Henrik,

I'm trying with the wccpv2 patch and notice that when I logout, MSN says
it could not log me out. I got this error before with squid enable and
believe it is related to the sign-in process that I'm having problems.
As I always get this error, I was able to get tcpdump info for it
(Client IP 10.7.40.50):

19:38:46.119122 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: S
698532612:698532612(0) ack 1001646707 win 5792 <mss
1460,nop,nop,timestamp 2450343 1433094414,nop,wscale 2>
19:38:46.123862 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: . ack
1449 win 2172 <nop,nop,timestamp 2450344 1433094414>
19:38:46.124329 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: . ack
2199 win 2896 <nop,nop,timestamp 2450344 1433094414>
19:38:46.378185 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: P
1:1420(1419) ack 2199 win 2896 <nop,nop,timestamp 2450408 1433094414>
19:38:46.378332 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: F
1420:1420(0) ack 2199 win 2896 <nop,nop,timestamp 2450408 1433094414>
19:38:46.409880 IP www.bay104.hotmail.com.http > 10.7.40.50.49313: . ack
2200 win 2896 <nop,nop,timestamp 2450416 1433094415>
19:38:46.425182 IP 65.54.183.192.http > 10.7.40.50.49314: S
695267443:695267443(0) ack 4241859601 win 5792 <mss
1460,nop,nop,timestamp 2450419 1433094415,nop,wscale 2>
19:38:46.429614 IP 65.54.183.192.http > 10.7.40.50.49314: . ack 699 win
1797 <nop,nop,timestamp 2450421 1433094415>
19:38:46.595194 IP 65.54.183.192.http > 10.7.40.50.49314: . 1:1449(1448)
ack 699 win 1797 <nop,nop,timestamp 2450462 1433094415>
19:38:46.595205 IP 65.54.183.192.http > 10.7.40.50.49314: P
1449:1777(328) ack 699 win 1797 <nop,nop,timestamp 2450462 1433094415>
19:38:46.834959 IP 65.54.183.195.http > 10.7.40.50.49315: S
692475596:692475596(0) ack 1799396858 win 5792 <mss
1460,nop,nop,timestamp 2450522 1433094416,nop,wscale 2>
19:38:46.837381 IP 65.54.183.195.http > 10.7.40.50.49315: . ack 534 win
1716 <nop,nop,timestamp 2450522 1433094416>
19:38:47.004368 IP 65.54.183.195.http > 10.7.40.50.49315: . 1:1449(1448)
ack 534 win 1716 <nop,nop,timestamp 2450564 1433094416>
19:38:47.004383 IP 65.54.183.195.http > 10.7.40.50.49315: P
1449:2039(590) ack 534 win 1716 <nop,nop,timestamp 2450564 1433094416>
19:38:47.081806 IP 65.54.183.195.http > 10.7.40.50.49315: .
2039:3487(1448) ack 534 win 1716 <nop,nop,timestamp 2450584 1433094416>
19:38:47.082129 IP 65.54.183.195.http > 10.7.40.50.49315: FP
3487:3641(154) ack 534 win 1716 <nop,nop,timestamp 2450584 1433094416>
19:38:47.178159 IP 65.54.183.195.http > 10.7.40.50.49315: . ack 535 win
1716 <nop,nop,timestamp 2450608 1433094416>
19:38:47.237836 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: S
696438232:696438232(0) ack 314746240 win 5792 <mss
1460,nop,nop,timestamp 2450623 1433094416,nop,wscale 2>
19:38:47.240764 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: . ack
511 win 1716 <nop,nop,timestamp 2450623 1433094416>
19:38:47.246044 IP 65.54.179.198.http > 10.7.40.50.49317: S
698796966:698796966(0) ack 4028979663 win 5792 <mss
1460,nop,nop,timestamp 2450625 1433094416,nop,wscale 2>
19:38:47.248673 IP 65.54.179.198.http > 10.7.40.50.49317: . ack 431 win
1716 <nop,nop,timestamp 2450625 1433094416>
19:38:47.411771 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: P
1:1172(1171) ack 511 win 1716 <nop,nop,timestamp 2450666 1433094416>
19:38:47.411892 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: F
1172:1172(0) ack 511 win 1716 <nop,nop,timestamp 2450666 1433094416>
19:38:47.420944 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49316: . ack
512 win 1716 <nop,nop,timestamp 2450668 1433094417>
19:38:47.423416 IP 65.54.179.198.http > 10.7.40.50.49317: P 1:558(557)
ack 431 win 1716 <nop,nop,timestamp 2450669 1433094416>
19:38:47.438157 IP origin.gfx2.hotmail.com.http > 10.7.40.50.49299: P
10875:11468(593) ack 8373 win 6272 <nop,nop,timestamp 2450673
1433094417>
19:38:47.443483 IP 65.54.179.198.http > 10.7.40.50.49317: . ack 870 win
1984 <nop,nop,timestamp 2450674 1433094417>
19:38:47.618679 IP 65.54.179.198.http > 10.7.40.50.49317: P 558:783(225)
ack 870 win 1984 <nop,nop,timestamp 2450718 1433094417>
19:38:47.618800 IP 65.54.179.198.http > 10.7.40.50.49317: F 783:783(0)
ack 870 win 1984 <nop,nop,timestamp 2450718 1433094417>
19:38:47.630231 IP 65.54.179.198.http > 10.7.40.50.49317: . ack 871 win
1984 <nop,nop,timestamp 2450721 1433094417>
19:38:47.742822 IP 65.54.183.195.http > 10.7.40.50.49318: S
708063175:708063175(0) ack 2024656296 win 5792 <mss
1460,nop,nop,timestamp 2450749 1433094417,nop,wscale 2>
19:38:47.746643 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 492 win
1716 <nop,nop,timestamp 2450750 1433094417>
19:38:47.912705 IP 65.54.183.195.http > 10.7.40.50.49318: . 1:1449(1448)
ack 492 win 1716 <nop,nop,timestamp 2450791 1433094417>
19:38:47.912720 IP 65.54.183.195.http > 10.7.40.50.49318: P
1449:1969(520) ack 492 win 1716 <nop,nop,timestamp 2450791 1433094417>
19:38:47.990188 IP 65.54.183.195.http > 10.7.40.50.49318: .
1969:3417(1448) ack 492 win 1716 <nop,nop,timestamp 2450811 1433094418>
19:38:47.990203 IP 65.54.183.195.http > 10.7.40.50.49318: P
3417:4705(1288) ack 492 win 1716 <nop,nop,timestamp 2450811 1433094418>
19:38:47.991494 IP 65.54.183.195.http > 10.7.40.50.49318: .
4705:6153(1448) ack 492 win 1716 <nop,nop,timestamp 2450811 1433094418>
19:38:47.992225 IP 65.54.183.195.http > 10.7.40.50.49318: P
6153:7489(1336) ack 492 win 1716 <nop,nop,timestamp 2450811 1433094418>
19:38:48.071065 IP 65.54.183.195.http > 10.7.40.50.49318: P
7489:8183(694) ack 492 win 1716 <nop,nop,timestamp 2450831 1433094418>
19:38:48.112410 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 927 win
1984 <nop,nop,timestamp 2450841 1433094418>
19:38:48.118084 IP 65.54.183.195.http > 10.7.40.50.49319: S
693003871:693003871(0) ack 2909579490 win 5792 <mss
1460,nop,nop,timestamp 2450843 1433094418,nop,wscale 2>
19:38:48.120651 IP 65.54.183.195.http > 10.7.40.50.49319: . ack 432 win
1716 <nop,nop,timestamp 2450843 1433094418>
19:38:48.275011 IP 65.54.183.195.http > 10.7.40.50.49318: .
8183:9631(1448) ack 927 win 1984 <nop,nop,timestamp 2450882 1433094418>
19:38:48.275022 IP 65.54.183.195.http > 10.7.40.50.49318: P
9631:10963(1332) ack 927 win 1984 <nop,nop,timestamp 2450882 1433094418>
19:38:48.283231 IP 65.54.183.195.http > 10.7.40.50.49319: . 1:1449(1448)
ack 432 win 1716 <nop,nop,timestamp 2450884 1433094418>
19:38:48.283244 IP 65.54.183.195.http > 10.7.40.50.49319: P
1449:2781(1332) ack 432 win 1716 <nop,nop,timestamp 2450884 1433094418>
19:38:48.352642 IP 65.54.183.195.http > 10.7.40.50.49318: .
10963:12411(1448) ack 927 win 1984 <nop,nop,timestamp 2450901
1433094419>
19:38:48.352655 IP 65.54.183.195.http > 10.7.40.50.49318: .
12411:13859(1448) ack 927 win 1984 <nop,nop,timestamp 2450901
1433094419>
19:38:48.352664 IP 65.54.183.195.http > 10.7.40.50.49318: P
13859:15059(1200) ack 927 win 1984 <nop,nop,timestamp 2450901
1433094419>
19:38:48.354092 IP 65.54.183.195.http > 10.7.40.50.49318: P
15059:16483(1424) ack 927 win 1984 <nop,nop,timestamp 2450902
1433094419>
19:38:48.362619 IP 65.54.183.195.http > 10.7.40.50.49319: .
2781:4229(1448) ack 432 win 1716 <nop,nop,timestamp 2450904 1433094419>
19:38:48.362674 IP 65.54.183.195.http > 10.7.40.50.49319: .
4229:5677(1448) ack 432 win 1716 <nop,nop,timestamp 2450904 1433094419>
19:38:48.362705 IP 65.54.183.195.http > 10.7.40.50.49319: P
5677:6877(1200) ack 432 win 1716 <nop,nop,timestamp 2450904 1433094419>
19:38:48.363940 IP 65.54.183.195.http > 10.7.40.50.49319: P
6877:8253(1376) ack 432 win 1716 <nop,nop,timestamp 2450904 1433094419>
19:38:48.429243 IP 65.54.183.195.http > 10.7.40.50.49318: P
16483:17447(964) ack 927 win 1984 <nop,nop,timestamp 2450920 1433094419>
19:38:48.441056 IP 65.54.183.195.http > 10.7.40.50.49319: .
8253:9701(1448) ack 432 win 1716 <nop,nop,timestamp 2450923 1433094419>
19:38:48.441067 IP 65.54.183.195.http > 10.7.40.50.49319: .
9701:11149(1448) ack 432 win 1716 <nop,nop,timestamp 2450923 1433094419>
19:38:48.441766 IP 65.54.183.195.http > 10.7.40.50.49319: P
11149:12349(1200) ack 432 win 1716 <nop,nop,timestamp 2450924
1433094419>
19:38:48.442925 IP 65.54.183.195.http > 10.7.40.50.49319: P
12349:13264(915) ack 432 win 1716 <nop,nop,timestamp 2450924 1433094419>
19:38:48.513818 IP 65.54.183.195.http > 10.7.40.50.49319: . ack 926 win
1984 <nop,nop,timestamp 2450942 1433094419>
19:38:48.527909 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 1432 win
2252 <nop,nop,timestamp 2450945 1433094419>
19:38:48.535728 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: S
701038677:701038677(0) ack 715570296 win 5792 <mss
1460,nop,nop,timestamp 2450947 1433094419,nop,wscale 2>
19:38:48.538417 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: . ack
516 win 1716 <nop,nop,timestamp 2450948 1433094419>
19:38:48.543263 IP 65.54.183.195.http > 10.7.40.50.49321: S
694624704:694624704(0) ack 2139437339 win 5792 <mss
1460,nop,nop,timestamp 2450949 1433094419,nop,wscale 2>
19:38:48.545732 IP 65.54.183.195.http > 10.7.40.50.49321: . ack 414 win
1716 <nop,nop,timestamp 2450950 1433094419>
19:38:48.677020 IP 65.54.183.195.http > 10.7.40.50.49319: P
13264:13674(410) ack 926 win 1984 <nop,nop,timestamp 2450982 1433094419>
19:38:48.678182 IP 65.54.183.195.http > 10.7.40.50.49319: .
13674:15122(1448) ack 926 win 1984 <nop,nop,timestamp 2450983
1433094419>
19:38:48.678190 IP 65.54.183.195.http > 10.7.40.50.49319: P
15122:15663(541) ack 926 win 1984 <nop,nop,timestamp 2450983 1433094419>
19:38:48.684495 IP 65.54.179.198.http > 10.7.40.50.49322: S
697704132:697704132(0) ack 2904972691 win 5792 <mss
1460,nop,nop,timestamp 2450984 1433094419,nop,wscale 2>
19:38:48.687243 IP 65.54.179.198.http > 10.7.40.50.49322: . ack 436 win
1716 <nop,nop,timestamp 2450985 1433094419>
19:38:48.690973 IP 65.54.183.195.http > 10.7.40.50.49318: P
17447:18666(1219) ack 1432 win 2252 <nop,nop,timestamp 2450986
1433094419>
19:38:48.699720 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 1855 win
2520 <nop,nop,timestamp 2450988 1433094419>
19:38:48.702287 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: P
1:1172(1171) ack 516 win 1716 <nop,nop,timestamp 2450989 1433094419>
19:38:48.702556 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: F
1172:1172(0) ack 516 win 1716 <nop,nop,timestamp 2450989 1433094419>
19:38:48.708788 IP 65.54.183.195.http > 10.7.40.50.49321: P 1:403(402)
ack 414 win 1716 <nop,nop,timestamp 2450990 1433094419>
19:38:48.862768 IP 65.54.183.195.http > 10.7.40.50.49318: P
18666:20073(1407) ack 1855 win 2520 <nop,nop,timestamp 2451029
1433094419>
19:38:48.863869 IP 65.54.179.198.http > 10.7.40.50.49322: P 1:558(557)
ack 436 win 1716 <nop,nop,timestamp 2451029 1433094419>
19:38:48.905357 IP lc2.bay0.hotmail.com.http > 10.7.40.50.49320: . ack
517 win 1716 <nop,nop,timestamp 2451039 1433094420>
19:38:48.928965 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 2286 win
2788 <nop,nop,timestamp 2451045 1433094420>
19:38:48.928988 IP 65.54.183.195.http > 10.7.40.50.49319: . ack 1392 win
2252 <nop,nop,timestamp 2451045 1433094420>
19:38:48.929018 IP 65.54.183.195.http > 10.7.40.50.49321: . ack 836 win
1984 <nop,nop,timestamp 2451045 1433094420>
19:38:48.963482 IP origin.gfx1.hotmail.com.http > 10.7.40.50.49323: S
696478005:696478005(0) ack 2287221538 win 5792 <mss
1460,nop,nop,timestamp 2451054 1433094420,nop,wscale 2>
19:38:48.966486 IP origin.gfx1.hotmail.com.http > 10.7.40.50.49323: .
ack 346 win 1716 <nop,nop,timestamp 2451055 1433094420>
19:38:48.969076 IP origin.gfx1.hotmail.com.http > 10.7.40.50.49323: P
1:518(517) ack 346 win 1716 <nop,nop,timestamp 2451055 1433094420>
19:38:48.973080 IP 65.54.183.195.http > 10.7.40.50.49324: S
696883400:696883400(0) ack 1194369896 win 5792 <mss
1460,nop,nop,timestamp 2451056 1433094420,nop,wscale 2>
19:38:48.975562 IP 65.54.183.195.http > 10.7.40.50.49324: . ack 481 win
1716 <nop,nop,timestamp 2451057 1433094420>
19:38:49.089130 IP 65.54.183.195.http > 10.7.40.50.49318: P
20073:21459(1386) ack 2286 win 2788 <nop,nop,timestamp 2451085
1433094420>
19:38:49.089251 IP 65.54.183.195.http > 10.7.40.50.49321: P
403:1805(1402) ack 836 win 1984 <nop,nop,timestamp 2451085 1433094420>
19:38:49.090737 IP 65.54.183.195.http > 10.7.40.50.49319: .
15663:17111(1448) ack 1392 win 2252 <nop,nop,timestamp 2451086
1433094420>
19:38:49.090748 IP 65.54.183.195.http > 10.7.40.50.49319: P
17111:17567(456) ack 1392 win 2252 <nop,nop,timestamp 2451086
1433094420>
19:38:49.117003 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 2771 win
3056 <nop,nop,timestamp 2451092 1433094420>
19:38:49.117174 IP 65.54.179.198.http > 10.7.40.50.49322: . ack 880 win
1984 <nop,nop,timestamp 2451092 1433094420>
19:38:49.121709 IP passportimages.com.http > 10.7.40.50.49325: S
705429775:705429775(0) ack 4157335157 win 5792 <mss
1460,nop,nop,timestamp 2451094 1433094420,nop,wscale 2>
19:38:49.124152 IP passportimages.com.http > 10.7.40.50.49325: . ack 412
win 1716 <nop,nop,timestamp 2451094 1433094420>
19:38:49.136250 IP 65.54.183.195.http > 10.7.40.50.49324: . 1:1449(1448)
ack 481 win 1716 <nop,nop,timestamp 2451097 1433094420>
19:38:49.136264 IP 65.54.183.195.http > 10.7.40.50.49324: P
1449:2781(1332) ack 481 win 1716 <nop,nop,timestamp 2451097 1433094420>
19:38:49.215094 IP 65.54.183.195.http > 10.7.40.50.49324: P
2781:4190(1409) ack 481 win 1716 <nop,nop,timestamp 2451117 1433094420>
19:38:49.258704 IP passportimages.com.http > 10.7.40.50.49325: .
1:1449(1448) ack 412 win 1716 <nop,nop,timestamp 2451128 1433094420>
19:38:49.258718 IP passportimages.com.http > 10.7.40.50.49325: P
1449:1991(542) ack 412 win 1716 <nop,nop,timestamp 2451128 1433094420>
19:38:49.279094 IP 65.54.183.195.http > 10.7.40.50.49318: .
21459:22907(1448) ack 2771 win 3056 <nop,nop,timestamp 2451133
1433094420>
19:38:49.279105 IP 65.54.183.195.http > 10.7.40.50.49318: P
22907:24239(1332) ack 2771 win 3056 <nop,nop,timestamp 2451133
1433094420>
19:38:49.292880 IP 65.54.179.198.http > 10.7.40.50.49322: P 558:783(225)
ack 880 win 1984 <nop,nop,timestamp 2451136 1433094420>
19:38:49.293130 IP 65.54.179.198.http > 10.7.40.50.49322: F 783:783(0)
ack 880 win 1984 <nop,nop,timestamp 2451136 1433094420>
19:38:49.294899 IP 65.54.179.198.http > 10.7.40.50.49322: . ack 881 win
1984 <nop,nop,timestamp 2451137 1433094421>
19:38:49.342677 IP 65.54.183.195.http > 10.7.40.50.49324: . ack 963 win
1984 <nop,nop,timestamp 2451149 1433094421>
19:38:49.356165 IP 65.54.183.195.http > 10.7.40.50.49318: .
24239:25687(1448) ack 2771 win 3056 <nop,nop,timestamp 2451152
1433094421>
19:38:49.356179 IP 65.54.183.195.http > 10.7.40.50.49318: .
25687:27135(1448) ack 2771 win 3056 <nop,nop,timestamp 2451152
1433094421>
19:38:49.356189 IP 65.54.183.195.http > 10.7.40.50.49318: P
27135:28335(1200) ack 2771 win 3056 <nop,nop,timestamp 2451152
1433094421>
19:38:49.357327 IP 65.54.183.195.http > 10.7.40.50.49318: P
28335:29557(1222) ack 2771 win 3056 <nop,nop,timestamp 2451152
1433094421>
19:38:49.503832 IP 65.54.183.195.http > 10.7.40.50.49324: .
4190:5638(1448) ack 963 win 1984 <nop,nop,timestamp 2451189 1433094421>
19:38:49.503843 IP 65.54.183.195.http > 10.7.40.50.49324: P
5638:5878(240) ack 963 win 1984 <nop,nop,timestamp 2451189 1433094421>
19:38:49.504676 IP 65.54.183.195.http > 10.7.40.50.49318: . ack 3209 win
3324 <nop,nop,timestamp 2451189 1433094421>
19:38:49.665590 IP 65.54.183.195.http > 10.7.40.50.49318: P
29557:30960(1403) ack 3209 win 3324 <nop,nop,timestamp 2451229
1433094421>

I'm not too sure what to make of it...

Thanks,
 Bryan
 

-----Original Message-----
From: Henrik Nordstrom [mailto:henrik@henriknordstrom.net]
Sent: March 16, 2006 11:10 AM
To: Shoebottom, Bryan
Cc: squid-users@squid-cache.org
Subject: RE: [squid-users] Hotmail login issue

tor 2006-03-16 klockan 10:16 -0500 skrev Shoebottom, Bryan:

> Thanks for the info, but I don't understand why this would be an
> intermittent issue? How come sometimes a client can login to hotmail,
> and other times it can't.

Can be many reasons.

What does the replies from hotmail look like for the troublesome
clients?

Any hints if looking at the traffic with tcpdump?

> I've had a couple client point directly to the cache and so far they
> haven't had any problems. They are point to port 80 and are going
> through the iptables redirect rule. With this information, it would
> seem that the error lies around the GRE/WCCP portion of the setup.
> Could it be possible that WCCP is causing these errors?

WCCP (and transparent interception in general) is a hack, violating
fundamentals of TCP/IP, and as such do cause problems, but usually not
this kind of problems..

Regards
Henrik
Received on Thu Mar 16 2006 - 12:47:18 MST