Re: Three-minute timeout during surfing?
On Monday, August 26, 2002, at 03:09 AM, Ken Ambrose wrote: > Howdy, all. I just upgraded my boxen to RH 7.3, and suddenly my webmail > (SquirrelMail) is taking three minutes just to bring up the login > page. I > double-checked my httpd.conf file, and HostnameLookups is set to off, > so I > don't -think- it's a reverse-DNS issue. I'm stumped. Below is a > snippet > from an ethereal dump. Any ideas? Have you had a chance to test it against a non-7.3 machine to make sure that it's not a problem on their end? If you're sure that it has something to do with your upgrade, do you have a set of HTTP headers from before you upgraded, for comparison? Erik -- Erik Price email: [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] ___ gnhlug-discuss mailing list [EMAIL PROTECTED] http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
Re: Three-minute timeout during surfing?
I'm sorry -- I wasn't explicit enough. The "boxen" I upgraded -were- the servers. The clients are many, and varied, but seem to all experience the same issue. Note that of the clients from whom I've heard complaints, all are behind NAT boxes, though I don't quite see how that would correlate. (I'm going to give a go from a box with a "real" IP shortly, now that I think of it...) -Ken On Mon, 26 Aug 2002, Erik Price wrote: > > On Monday, August 26, 2002, at 03:09 AM, Ken Ambrose wrote: > > > Howdy, all. I just upgraded my boxen to RH 7.3, and suddenly my webmail > > (SquirrelMail) is taking three minutes just to bring up the login > > page. I > > double-checked my httpd.conf file, and HostnameLookups is set to off, > > so I > > don't -think- it's a reverse-DNS issue. I'm stumped. Below is a > > snippet > > from an ethereal dump. Any ideas? > > Have you had a chance to test it against a non-7.3 machine to make sure > that it's not a problem on their end? > > If you're sure that it has something to do with your upgrade, do you > have a set of HTTP headers from before you upgraded, for comparison? > > > > > > > Erik > > > > > -- > Erik Price > > email: [EMAIL PROTECTED] > jabber: [EMAIL PROTECTED] > > ___ > gnhlug-discuss mailing list > [EMAIL PROTECTED] > http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss > > ___ gnhlug-discuss mailing list [EMAIL PROTECTED] http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
Re: Three-minute timeout during surfing?
On Mon, 26 Aug 2002, Ken Ambrose wrote: > Howdy, all. I just upgraded my boxen to RH 7.3, and suddenly my webmail > (SquirrelMail) is taking three minutes just to bring up the login page. I > double-checked my httpd.conf file, and HostnameLookups is set to off, so I > don't -think- it's a reverse-DNS issue. I'm stumped. Below is a snippet > from an ethereal dump. Any ideas? And the apache logs don't show anything? What about a tcpdump to see if you're getting any retries? Ben -- A smile will gain you ten more years of life. ___ gnhlug-discuss mailing list [EMAIL PROTECTED] http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
Re: Three-minute timeout during surfing?
On Mon, 26 Aug 2002, Ken Ambrose wrote: =>Howdy, all. I just upgraded my boxen to RH 7.3, and suddenly my webmail =>(SquirrelMail) is taking three minutes just to bring up the login page. I =>double-checked my httpd.conf file, and HostnameLookups is set to off, so I =>don't -think- it's a reverse-DNS issue. I'm stumped. Below is a snippet =>from an ethereal dump. Any ideas? => =>GET /src/login.php HTTP/1.1 =>Host: webmail.xanoptix.com =>User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.9) =>Gecko/20020408 =>Accept: =>text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,video/x-mng,image/png,image/jpeg,image/gif;q=0.2,text/css,*/*;q=0.1 =>Accept-Language: en-us, en;q=0.50 =>Accept-Encoding: gzip, deflate, compress;q=0.9 =>Accept-Charset: ISO-8859-1, utf-8;q=0.66, *;q=0.66 =>Keep-Alive: 300 =>Connection: keep-alive =>Cookie: PHPSESSID=4e0a82542cee47993ed47768344a8362; key=SFW81UI5V1Y%3D => => - insert three-minute wait here - => =>HTTP/1.1 200 OK =>Date: Mon, 26 Aug 2002 05:54:03 GMT =>Server: Apache/1.3.23 (Unix) (Red-Hat/Linux) mod_python/2.7.6 =>Python/1.5.2 mod_ssl/2.8.7 OpenSSL/0.9.6b DAV/1.0.3 PHP/4.1.2 =>mod_perl/1.26 mod_throttle/3.1.2 =>X-Powered-By: PHP/4.1.2 => =>Note that the top portion is all "from" me, and the bottom portion is from =>the server. => =>Thanks! => =>-Ken I bet you a beer that if everyone is running identd, your delay will go away. -- -Time flies like the wind. Fruit flies like a banana. Stranger things have - -happened but none stranger than this. Does your driver's license say Organ -Donor?Black holes are where God divided by zero. Listen to me! We are all- -individuals! What if this weren't a hypothetical question? [EMAIL PROTECTED] ___ gnhlug-discuss mailing list [EMAIL PROTECTED] http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
Re: Three-minute timeout during surfing?
Ken Ambrose wrote: > I'm sorry -- I wasn't explicit enough. The "boxen" I upgraded -were- > the servers. The clients are many, and varied, but seem to all > experience the same issue. Note that of the clients from whom I've > heard complaints, all are behind NAT boxes, though I don't quite see > how that would correlate. (I'm going to give a go from a box with a > "real" IP shortly, now that I think of it...) Just some random thoughts that may or may not be leads ... Are you using plugins that affect the login page, such as Quote of the Day? Are you authenticating users with the LDAP plugin? Do you force secure connects, and is the security certificate correct for the new system if you do? -- Bill Mullen [EMAIL PROTECTED] "Giving money and power to the government is like giving whiskey and car keys to teenage boys." - P.J. O'Rourke ___ gnhlug-discuss mailing list [EMAIL PROTECTED] http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
Re: Three-minute timeout during surfing?
On Mon, 26 Aug 2002, at 12:09am, [EMAIL PROTECTED] wrote: > Below is a snippet from an ethereal dump. Any ideas? Shutdown everything. Place system on an isolated network. Start packet sniffer (no filter). Start any services Apache depends on (e.g., a local DNS resolver). Start Apache. Send a single web client request. Watch to see if the system is sending any packets (other than the HTTP request). If so, find out why, and see if the (lack of) response is the problem. If not, the problem must be local -- database problem, maybe? The above is crude, but effective. Tune to be less invasive as needed. -- Ben Scott <[EMAIL PROTECTED]> | The opinions expressed in this message are those of the author and do not | | necessarily represent the views or policy of any other person, entity or | | organization. All information is provided without warranty of any kind. | ___ gnhlug-discuss mailing list [EMAIL PROTECTED] http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
Re: Three-minute timeout during surfing?
In a message dated: Mon, 26 Aug 2002 20:32:08 EDT [EMAIL PROTECTED] said: >On Mon, 26 Aug 2002, at 12:09am, [EMAIL PROTECTED] wrote: >> Below is a snippet from an ethereal dump. Any ideas? > > Shutdown everything. Place system on an isolated network. Start packet >sniffer (no filter). Start any services Apache depends on (e.g., a local >DNS resolver). Start Apache. Send a single web client request. Watch to >see if the system is sending any packets (other than the HTTP request). If >so, find out why, and see if the (lack of) response is the problem. If not, >the problem must be local -- database problem, maybe? Ahhhm, just curious here, but why would a web server be sending out *any* packets, including HTTP requests. Web servers *serve*, they don't request. Good policy is to have an ip[chain,table]s script which prevents outgoing http requests from web servers. If you're seeing requests *initiated* by your web server, you've got a major problem (unless it's something you specifically condone and (allowed to be) configured yourself. -- Seeya, Paul -- It may look like I'm just sitting here doing nothing, but I'm really actively waiting for all my problems to go away. If you're not having fun, you're not doing it right! ___ gnhlug-discuss mailing list [EMAIL PROTECTED] http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
Re: Three-minute timeout during surfing?
On Tue, 27 Aug 2002, at 9:30am, [EMAIL PROTECTED] wrote: > Ahhhm, just curious here, but why would a web server be sending out > *any* packets, including HTTP requests. That's the point. Obviously, something is broken; the goal is to find out what. Maybe it is sending a DNS query, or an ident query, or trying to make a database connection to something else, or who knows what. So, first, eliminate that possibility. -- Ben Scott <[EMAIL PROTECTED]> | The opinions expressed in this message are those of the author and do not | | necessarily represent the views or policy of any other person, entity or | | organization. All information is provided without warranty of any kind. | ___ gnhlug-discuss mailing list [EMAIL PROTECTED] http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
Re: Three-minute timeout during surfing?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At some point hitherto, [EMAIL PROTECTED] hath spake thusly: > > Shutdown everything. Place system on an isolated network. Start packet > >sniffer (no filter). Start any services Apache depends on (e.g., a local > >DNS resolver). Start Apache. Send a single web client request. Watch to > >see if the system is sending any packets (other than the HTTP request). If > >so, find out why, and see if the (lack of) response is the problem. If not, > >the problem must be local -- database problem, maybe? > > Ahhhm, just curious here, but why would a web server be sending out > *any* packets, including HTTP requests. LOTS of reasons, depending on what it does: DNS queries to look up client addresses; auth lookups (identd) to look up client information; database connections for content or data entry; LDAP or other protocol for network-based authentication, etc. etc. ad nauseum. Also I'm pretty sure Ben meant "other than answering the HTTP request" above. > If you're seeing requests *initiated* by your web server, you've got > a major problem (unless it's something you specifically condone and > (allowed to be) configured yourself. That may or may not be true, depending on one's interpretation of the latter half of that statement, how the system is used, and the skill of the person maintaining it all... - -- Derek Martin [EMAIL PROTECTED] - - I prefer mail encrypted with PGP/GPG! GnuPG Key ID: 0x81CFE75D Retrieve my public key at http://pgp.mit.edu Learn more about it at http://www.gnupg.org -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE9bGbOdjdlQoHP510RAlMmAJ9MO9Y0CCw0C911IltRep7kT/A+cACghWRZ 8Fmg9I6zMbJpYTU5LmPm1m8= =uppG -END PGP SIGNATURE- ___ gnhlug-discuss mailing list [EMAIL PROTECTED] http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
