Re: [squid-users] access.log increasing amazingly

From: Charanbeer <charanbeer.s@dont-contact.us>
Date: Fri, 3 Aug 2001 16:06:56 +0530

Hi

Thanks for the suggestion. It is fixed. It was some stupid program called
cd_load.exe(lying in c:\windows\system) on the client machines(in question)
which was causing so much trouble making unnecessary requests in order to
update something.

Charanbeer.

----- Original Message -----
From: Colin Campbell <sgcccdc@citec.qld.gov.au>
To: Charanbeer <charanbeer.s@net4india.net>
Cc: Squid <squid-users@squid-cache.org>
Sent: Friday, August 03, 2001 3:56 AM
Subject: Re: [squid-users] access.log increasing amazingly

> Hi,
>
> You have the IP address of the machine making all these connections. Why
> don't you contact the owner? See what they are doing. They've got
> something misconfigured and it keeps retrying, roughly every 7
> milliseconds. Whatever they are running is not aware there's a proxy
> in the way.
>
> On Thu, 2 Aug 2001, Charanbeer wrote:
>
> > Hi
> >
> > I am using squid 2.3 stable on Red Hat Linux 6.1. For the past few days
the size of access.log has been increasing amazingly. Since yesterday( in
less than 20 hours) the size has increased by approx. 500 megs while only
the 40 odd users are using it. Its been running fine for past 4 months.
Following is what I can see running like anything in its access.log:
> >
> > 995703904.225 1 192.168.1.102 NONE/400 1311 GET
/scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???P
> > ??&AW=146&LV=2021&CU=17177528 - NONE/- -
> > 995703904.232 1 192.168.1.102 NONE/400 1311 GET
/scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???P
> > ??&AW=146&LV=2021&CU=17177528 - NONE/- -
> > 995703904.248 1 192.168.1.102 NONE/400 1311 GET
/scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???P
> > ??&AW=146&LV=2021&CU=17177553 - NONE/- -
> > 995703904.253 1 192.168.1.102 NONE/400 1311 GET
/scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???P
> > ??&AW=146&LV=2021&CU=17177553 - NONE/- -
> > 995703904.260 1 192.168.1.77 NONE/400 1311 GET
/scripts/cms/CmsInit.ASP?ID=1&D2=@?OACCB???|~
> > B&AW=146&LV=2021&CU=17835093 - NONE/- -
> >
> > Can somebody please put light on it.
>
> Colin
>
>
Received on Fri Aug 03 2001 - 04:33:28 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:01:27 MST