Re: [squid-users] NULL characters in Header - how to get which sites generate this?

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Mon, 17 Sep 2012 15:04:11 +1200

On 14/09/2012 12:14 a.m., x-man wrote:
> Hi,
>
> my cache.log file is full of this kind of messages:
>
> Content-Type: application/x-www-form-urlencoded
> 2012/09/13 17:39:35| WARNING: HTTP header contains NULL characters {Accept:
> */*
> Content-Type: application/x-www-form-urlencoded}
> NULL
> {Accept: */*
> Content-Type: application/x-www-form-urlencoded
> 2012/09/13 17:39:35| WARNING: HTTP header contains NULL characters {Accept:
> */*
> Content-Type: application/x-www-form-urlencoded}
> NULL
> {Accept: */*
> Content-Type: application/x-www-form-urlencoded
>
> How to find out which site/sites are generating this, so I can bypass
> them...
>
> I'm running squid 3.1.20 as transparent tproxy for many users.

Unfortunately with 3.1 your best hope is a tcpdump trace.

Amos
Received on Mon Sep 17 2012 - 03:04:21 MDT

This archive was generated by hypermail 2.2.0 : Mon Sep 17 2012 - 12:00:03 MDT