[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]
Austin Gossmeyer wrote: > > Is this what you need? Yes and check the other logs - especially cache.log to see if there are any clues - as that is where errors are logged. My guess is you'll see a fair chunk of errors about upstream links. > sudo tail -f /var/log/squid/access.log > 1245048659.691 180250 127.0.0.1 TCP_MISS/504 360 POST > http://safebrowsing.client > s.google.com/safebrowsing/downloads?client=Firefox&appver=3.0.10&pver=2.2&wrkey= > > AKEgNiu3K25OiwVKVgycgQh1H41jGdmqhaiHsFYtRas-q-4mfaCkWjt6IghaSwAsfQxgoCP2TZu-4PXb > 180 seconds? Very slow. 504 is "gateway timed out". So something wrong with routing probably you needed to use the upstream proxy and didn't?! Although others in the education sector probably have more idea on the specifics of your connection. > QIc2zmUMMvwI3TQQCw== - DIRECT/209.85.227.101 text/html Direct to a Google IP > 1245050461.996 182549 127.0.0.1 TCP_MISS/504 360 POST > http://safebrowsing.client > s.google.com/safebrowsing/downloads?client=Firefox&appver=3.0.10&pver=2.2&wrkey= > > AKEgNiu3K25OiwVKVgycgQh1H41jGdmqhaiHsFYtRas-q-4mfaCkWjt6IghaSwAsfQxgoCP2TZu-4PXb > > QIc2zmUMMvwI3TQQCw== - DIRECT/209.85.227.100 text/html > 1245050805.054 179946 127.0.0.1 TCP_MISS/504 360 GET > http://go.microsoft.com/fwl ink/?LinkId=69157 - > DIRECT/64.4.52.189 text/html > 1245051530.466 36 127.0.0.1 TCP_MISS/302 695 GET > http://www.google.com/ - FI > RST_UP_PARENT/proxy.liskeard.cornwall.sch.uk text/html > 1245051530.541 68 127.0.0.1 TCP_MISS/200 8702 GET > http://www.google.co.uk/ - > FIRST_UP_PARENT/proxy.liskeard.cornwall.sch.uk text/html These requests succeeded and were quick, but instead of going direct they went to an upstream proxy. > 1245051693.208 179730 127.0.0.1 TCP_MISS/504 360 GET > http://msnportal.112.2o7.net/b/ss/msnportalukhome/1/H.1-pdv-2/s23095015961754?%5BAQB%5D&ndh=1&t=15%2F5%2F2009%208%3A37%3A42%201%20-60&ns=msnportal&pageName=UK%20HomePage&g=http%3A%2F%2Fuk.msn.com%2F%3Focid%3Diehp&r=&s=1366x768&c=32&k=Y&bw=1362&bh=560&hp=N&c12=http%3A%2F%2Fcars.uk.msn.com%2FNews%2Fcar_news_article.aspx%3Fcp-documentid%3D147896722&c13=msnbody%3Ewrapper%3Epage%3Econtent%3Earea1&c15=2&c16=Cool%20customers&c17=UK%20HomePage%3Auk.msn.com&c18=&pe=lnk_o&pev2=Cool%20customers&%5BAQE%5D > - DIRECT/66.235.138.3 text/html You probably don't care about these folks anyway. One of those groups collecting information of websurfers for advertising (we hope). I don't see an obvious pattern to when it is going direct and when it is using the proxy.liskeard.cornwall.sch.uk, but hopefully that is more obvious to yourself. The cache log may also hold a clue, if say the upstream proxy is unreachable or something like that. Simon -- The Mailing List for the Devon & Cornwall LUG http://mailman.dclug.org.uk/listinfo/list FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html