Re: [squid-users] squid server crash

Neil A. Hillard escribió:
> Hi,
>
> Slacker wrote:
>> Emilio Casbas, on 02/23/2007 03:11 PM [GMT+500], wrote :
>>> Hi
>>>
>>> We have two squid servers as reverse proxys in front of our web servers
>>> (squid-2.5Stable10). Both have working right for some months, but today
>>> We have found the two servers at the same time down, with a kernel panic
>>> error on the screen.
>>> The last access.log time in the two servers it was at similar hour, and
>>> We didn't found any revelance string in access.log.
>>>
>>> This is the last line before the crash, but We don't think it's
>>> related to.
>>>
>>> cache.log
>>> 2007/02/22 22:41:47| parseHttpRequest: Unsupported method
>>> 'oors;c=ES;g=a;a=4;s=1;!category=nrm;dcopt=ist;sz=728x90;ptile=1;ord=300386615346895800?'
>>>
>>> 2007/02/22 22:41:47| clientReadRequest: FD 840 Invalid Request
>>>
>>> We have looking for strange patterns in the logs machine too, but We
>>> didn't found anything.
>>>
>> Check the sizes of squid logs files if they are >2 G then rotate them
>> with squid -k rotate
>
> The op stated that both boxes had kernel panics which tends to point the
> finger at the OS and not Squid. If squid can make the OS kernel panic
> then the OS needs fixing.
>
>> 2Gb logs would cause squid to terminate but shouldn't cause a panic.
>
> Was there anything logged in syslog at the time of the panic?
>
>
> Neil.
>

The last line on messages log before the crash:

Feb 22 22:41:47 servercrash squid[21624]: parseHttpRequest: Unsupported
method 'oors;c=ES;g=a;a=4;s=1;!category=nrm;dcopt=ist;sz=728x90;pt
ile=1;ord=300386615346895800?'
Feb 22 22:41:47 servercrash squid[21624]: clientReadRequest: FD 840
Invalid Request

Thanks Neil for the hint.

-- 
Emilio Casbas