Re: [squid-users] log

From: Marc Elsen <marc.elsen@dont-contact.us>
Date: Fri, 28 Mar 2003 14:17:15 +0100

Emilio Casbas wrote:
>
> Hi !
>
> i found this lines in the logs of squid
>
> 1048854772.743 1 x.x.x.x NONE/400 7113 GET
> http://proxy.xx.xx.xx:8080proxy.xx.xx.xx:8080 - NONE/- -
> 1048854772.758 1 x.x.x.x NONE/400 7113 GET
> /scripts/cms/CmsInit.ASP?ID=1&D2=Fb_AKs????@??&AW=167&LV=2045&CU=155584265
> - NONE/- -
> 1048854772.743 1 x.x.x.x NONE/400 7113 GET
> http://proxy.xx.xx.xx:8080proxy.xx.xx.xx:8080 - NONE/- -
> 1048854772.758 1 x.x.x.x NONE/400 7113 GET
> /scripts/cms/CmsInit.ASP?ID=1&D2=Fb_AKs????@??&AW=167&LV=2045&CU=155584265
> - NONE/- -
>
> where proxy.xx.xx.xx:8080 is the proxy which configure in the browsers,
> there are 9000 requests per day of this type constantly.
> What is it ?
>

 This is probably related to a web application, which is proxy aware
 but sending 'wrong proxy' commands to squid.

 Identify the IP the requests comes,from, ask the PC user
 what he is doing and what applications he/she is using.
 Look/ask for webapplications, which you may not be aware off.

 M.

> Thanks in advance.
>
> Emilio
> ----------

-- 
 'Time is a consequence of Matter thus
 General Relativity is a direct consequence of QM
 (M.E. Mar 2002)
Received on Fri Mar 28 2003 - 06:17:23 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:14:24 MST