HTTP Anti-Virus Proxy

Hello,
I've been using havp sind 4 month now and never run into any trouble. However, today some of my users watched a webcam which caused havp to spawn 100 threads, all locked up.
15/04/2009 11:03:23 All childs busy, spawning new (now: 101) - SERVERNUMBER might be too low

The URL in question was: http://la-palma-aktuell.de/cc/cam/live.html
After that I had to restart havp and squid.
I'm running a sandwich squid-havp-squid configuration. havp 0.89 and squid 2.6stable14. In the squid configuration there is a urlpath_regex acl on jpg so they go always direct.

acl noscan urlpath_regex -i \.(flv|swf|jpg|jpeg|jpg\?|gif|png|ico|bmp|mov|avi)$
always_direct allow noscan
in the havp config, the option scanimages is set to false.

Can someone else reproduce the problem or does someone has a hint for me to avoid the problem?

Thanks in advance,
fsom

It only seems to load 1-2 pictures per second here and always closes connection.. strange that it takes all children. Unless there are _many_ users.

Anyway, it seems your regex is wrong.. it's trying to match ".jpg?$" right now.. but there is data after ?.. maybe better one..

acl noscan urlpath_regex -i \.(flv|swf|jpg|jpeg|gif|png|ico|bmp|mov|avi)(\?|$)

thanks for your quick reply. I altered the squid configuration like you proposed and I'm now sure that it's not a problem within havp. It is working with the InternetExplorer 6.0 but Firefox 3.0.8 is loading like 100 images/sec.

This ends up with loads of open connections:
194.180.xxx.xxx:43189 80.32.214.62:80 SYN_SENT
netstat -an | grep 80.32.214.62 | wc
571 3426 46251

and at some point squid cant request any other sites.

Thanks again for your help,
fsom