Re: [squid-users] Strange entries from my log

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Tue, 15 Oct 2013 14:54:58 +1300

On 15/10/2013 1:32 a.m., Ralf Hildebrandt wrote:
> I'm running 3.4.x with c-icap, and every now and then I'm seeing this
> in my log:
>
> Oct 14 09:06:47 proxy-cvk-1 squid[12081]: internalStart: unknown request:#012GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1#015#012Host: c-69-250-37-253.hsd1.dc.comcast.net#015#012User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0#015#012Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8#015#012Accept-Language: en-US,en;q=0.5#015#012Accept-Encoding: gzip, deflate#015#012Connection: keep-alive#015#012#015#012
> Oct 14 09:44:15 proxy-cvk-1 squid[12081]: helperHandleRead: unexpected read from redirector #1, 1 bytes '#012'
>
> Do you have any ide what this might be?

012 and 015 are the octal numerics for CR and LF. (why its displaying in
octal instead of hex I do not know).

Do you have strict HTTP parsing enabled?
  That can be enabled either with --disable-http-violations or the
squid.conf directive relaxed_header_parser set to "off" or "warn".
If enabled it will strictly follow the rules of HTTP regarding useless
whitespace between message blocks and the first line above can appear.

The second line is a broken helper responding with empty-line. Probably
a python or perl helper that is missing the required output cleanup and
echoing double-LF back to Squid on responses.

Amos
Received on Tue Oct 15 2013 - 01:55:13 MDT

This archive was generated by hypermail 2.2.0 : Tue Oct 15 2013 - 12:00:05 MDT