Re: [squid-users] access.log increasing amazingly

From: Colin Campbell <sgcccdc@dont-contact.us>
Date: Fri, 3 Aug 2001 08:26:51 +1000 (EST)

Hi,

You have the IP address of the machine making all these connections. Why
don't you contact the owner? See what they are doing. They've got
something misconfigured and it keeps retrying, roughly every 7
milliseconds. Whatever they are running is not aware there's a proxy
in the way.

 On Thu, 2 Aug 2001, Charanbeer wrote:

> Hi
>
> I am using squid 2.3 stable on Red Hat Linux 6.1. For the past few days the size of access.log has been increasing amazingly. Since yesterday( in less than 20 hours) the size has increased by approx. 500 megs while only the 40 odd users are using it. Its been running fine for past 4 months. Following is what I can see running like anything in its access.log:
>
> 995703904.225 1 192.168.1.102 NONE/400 1311 GET /scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???P
> ??&AW=146&LV=2021&CU=17177528 - NONE/- -
> 995703904.232 1 192.168.1.102 NONE/400 1311 GET /scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???P
> ??&AW=146&LV=2021&CU=17177528 - NONE/- -
> 995703904.248 1 192.168.1.102 NONE/400 1311 GET /scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???P
> ??&AW=146&LV=2021&CU=17177553 - NONE/- -
> 995703904.253 1 192.168.1.102 NONE/400 1311 GET /scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???P
> ??&AW=146&LV=2021&CU=17177553 - NONE/- -
> 995703904.260 1 192.168.1.77 NONE/400 1311 GET /scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???|~
> B&AW=146&LV=2021&CU=17835093 - NONE/- -
>
> Can somebody please put light on it.

Colin
Received on Thu Aug 02 2001 - 16:27:13 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:01:26 MST