[squid-users] error:transaction-end-before-headers

[Alex Rousskov]

On 06/30/2017 03:35 AM, joseph wrote:
> i have over then 10000  daily this error befor was 0 or at least not much
> using squid 5   latest patch  up to  r15228
> my setup same nothing change

What Squid version did you run "before"?


> ps.. all my client produce this   
> 
> 1498793967.385      0 10.3.252.229 NONE/000 0 NONE
> error:transaction-end-before-headers - HIER_NONE/- -

These errors are meant to be logged for clients that open and close
connections without sending any HTTP headers (or without sending
complete HTTP headers -- you can log HTTP request size to distinguish
these two cases).

I do not know whether Squid has a bug identifying these cases or you
just have a lot of these cases in your environment. If these are
frequent, then you should be able to learn more about them by capturing
network packets and matching them with the errors. Logging the
client/source TCP port number would help with that. There are a couple
of known problems with the detection code, but if this is some
new/unknown problem, it would be useful for developers to know more
about it. Please investigate if you can.

I do not know whether it is possible to match these cases with existing
ACLs so that you can stop logging them (if that is what you want).
Adding an ACL for this purpose is a known TODO, but I am not aware of
anybody working on that or sponsoring that work.

If you want to modify Squid to stop logging these cases, add "return;"
at the very beginning of ConnStateData::checkLogging() in
src/client_side.cc.

You forgot to ask a question, but I hope the above info is useful.


HTH,

Alex.