Re: [squid-users] Anyone know what a client would be doing to cause the following log entries?

From: dweimer <dweimer_at_dweimer.net>
Date: Tue, 15 Jan 2013 16:40:22 -0600

On 2013-01-15 13:44, Will Roberts wrote:
> On Tue, Jan 15, 2013 at 2:39 PM, dweimer <dweimer_at_dweimer.net> wrote:
>> 01-15-2013 12:24:34PM 0 10.20.146.43 NONE/400 388 HEAD / -
>> NONE/-
>> text/html
>> 01-15-2013 01:00:01PM 0 10.20.146.43 NONE/400 388 HEAD / -
>> NONE/-
>> text/html
>
> Someone's doing a HEAD request against your proxy as if it was a web
> server

well, whatever is on his PC that's doing this, isn't telling me any
more from a network capture.

HEAD / HTTP/1.1
Connection: Close
Host: 10.50.20.5:8080

HTTP/1.0 400 Bad Request
Server: squid/3.1.20
Mime-Version: 1.0
Date: Tue, 15 Jan 2013 21:30:55 GMT
Content-Type: text/html
Content-Length: 2573
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from proxy1.orscheln.com
X-Cache-Lookup: NONE from proxy1.orscheln.com:8080
Via: 1.0 proxy1.orscheln.com (squid/3.1.20)
Connection: close

-- 
Thanks,
    Dean E. Weimer
    http://www.dweimer.net/
Received on Tue Jan 15 2013 - 22:40:29 MST

This archive was generated by hypermail 2.2.0 : Wed Jan 16 2013 - 12:00:03 MST