On Sat, 14 Feb 2004, Danish Khan wrote:
> I have configured my box with 8192 FD but still I got warnings of FD's and
> tooo many comm.(23) Port error WHY plz update :(
>
> Danish
>
> -----Original Message-----
> From: Mahmood Ahmed [mailto:[EMAIL PROTECTED]
> Sent: Saturday, February 14, 2004 10:24 PM
> To: [EMAIL PROTECTED]
> Subject: [squid-users] is it a DOS attack ??
>
> Hello List!
>
> I have been facing this strange problem for last 3 days. I hope some one
> here will be able to shed light on it. I dont know wheather its a bug or a
> virus or a DOS attack but it is hitting my squid box very hard. in my access
>
> log i am seeing a lot of these.
>
> 1076806934.151 451 202.133.44.214 TCP_MISS/000 0 GET
> http://www.microsoft.com/ - NONE/- -
> 1076806934.163 461 202.133.44.214 TCP_MISS/000 0 GET
This looks to me like a forwarding loop.
Are you using HTTP interception?
Duane W.