[squid-users] Squid cpu usage 100% from few days ago !!

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 


14.08.2016 18:35, Antony Stone пишет:
> On Sunday 14 August 2016 at 14:25:38, Omid Kosari wrote:
>
>> Still could not find the app or url but the 2 server ip addresses are
>> 149.202.92.139 and 173.236.187.17 .
>
> The first does not respond on port 80 for me, and the second simply
tells me
> that it doesn't know which Dreamhost website I'm trying to access.
>
>> TAG_NONE/400 24728 "Strange binary characters here"
>
> I would agree with that description.
>
> My guess is that something is sending non-HTTP data over connections
to port
> 80 on the servers, therefore Squid can't handle it (because it's an HTTP
> proxy).
Bittorrent often use HTTP port, also some IM - like ICQ.
>
> I think you should be able to identify what the target URL / request
being
> made by the client application is, provided you can get at the earliest
> entries in your log files for such a connection.
Identify client application and block it ;) Or bypass proxy for it :)
>
>
>
> Regards,
>
>
> Antony.
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXsIHUAAoJENNXIZxhPexGx+kH/RiqhZgiP9KudxTcrpaZJOgm
dPC/5zRoQRt09uQnyGRcaY7xXfAdpSzRU+BI6OIaiOnOZwbo0/rWkaPvpe+FUwHo
D4PSVzzfCd9SyVkuPpIbA6B/gYqpqNZR8FuGkxMBN/860t1yfkXlBjP/fEU5daiL
BfarfyGSl8qc5iA73SgvhK8r+jVJd9wKcT/TdFvlrgxXFD/Z1OPAQs1Gztj00mk6
qVRoj60s8yP0thialLln43Z+kw/Z3H/es6ZFw43HXvT4jeCwZxK1LCXnAwHlPRi/
tzUOTEwAnWoOTOMunF7K5wnKvLdUCY8eWp5LhWDBoZI7TvJ/XnR4wlTZ6E53q3s=
=Qyu3
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160814/d22ef52d/attachment.key>