Re: [squid-users] Strange entries from my log

From: Ralf Hildebrandt <Ralf.Hildebrandt_at_charite.de>
Date: Thu, 17 Oct 2013 14:47:29 +0200

* Ralf Hildebrandt <Ralf.Hildebrandt_at_charite.de>:
> * Ralf Hildebrandt <Ralf.Hildebrandt_at_charite.de>:
>
> > 2013/10/15 10:49:59| internalStart: unknown request: GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1
> > Host: 83.172.xx.xx
> > User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0)
> > Gecko/20100101 Firefox/24.0
> > Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
> > Accept-Language: en-US,en;q=0.5
> > Accept-Encoding: gzip, deflate
> > Connection: keep-alive
>
> 83.172.xx.xx corresponds to proxied ftp:// connections, and squid
> probably adds the icons:
>
> 1381827085.634 767 192.168.x.x TCP_MISS/200 9661 GET ftp://83.172.xx.xx/AiDisk_a1/Videos/Filmer/Osedda/ - HIER_DIRECT/83.172.xx.xx text/html

But why would a proxied ftp connection cause these requests?
Generating the icons is ok, but "Host: 83.172.xx.xx" is not actively
quering our squid, but 192.168.x.x -- of 127.0.0.1 if squid it
generating/ adding the icons.

-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
ralf.hildebrandt_at_charite.de        Campus Benjamin Franklin
http://www.charite.de              Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155
Received on Thu Oct 17 2013 - 12:47:40 MDT

This archive was generated by hypermail 2.2.0 : Fri Oct 18 2013 - 12:00:07 MDT