On 20/06/2013 10:13 p.m., Tom Tom wrote:
Hi Amos
I can actually see this abandoning-messages just for CONNECT-Requests
(and as much as I have investigated -> only for these).
Sometimes, there is a 407 before, and sometimes there is just a
CONNECT-Request (probably the browser send the
authentication-challenge properly within the request). In my case, it
looks like this:
CACHE.LOG
=========
2013/06/20 12:02:34 kid4| abandoning local=172.xx.xx.xx:3128
remote=10.xx.xx.xx:57286 FD 23926 flags=1
ACCESS.LOG
==========
[Thu Jun 20 12:02:34 2013].773 0 10.xx.xx.xx TCP_DENIED/407 3768
CONNECT geo.gateway.messenger.live.com:443 - HIER_NONE/- text/html
[Thu Jun 20 12:02:34 2013].785 7 10.xx.xx.xx NONE/200 5543
CONNECT geo.gateway.messenger.live.com:443 USER HIER_NONE/- text/html
Is this HIER_NONE entry consistent?
Is that NONE/200 or */407 consistent?
Or are there other codes showing up in either of those two log fields.
Amos
