Re: [squid-users] WARNING: unparseable HTTP header field {:: }

From: Ralf Hildebrandt <Ralf.Hildebrandt_at_charite.de>
Date: Tue, 12 Nov 2013 10:46:19 +0100

* Amos Jeffries <squid3_at_treenet.co.nz>:
> On 12/11/2013 9:08 p.m., Dr.x wrote:
> > hi ,
> > is that harmfull log ??
> > ====================================================================
> > 2013/11/11 02:20:12 kid2| WARNING: unparseable HTTP header field {:: }
> > 2013/11/11 02:20:13 kid1| ctx: exit level 0
> > 2013/11/11 02:20:13 kid1| ctx: enter level 0:
> > 'http://vap2iad3.lijit.com/www/delivery/lg.php?bannerid=38827&campaignid=232&cids=232&bids=38827&zoneid=220681&retarget_matches=null&tid=1075526134_220681_a90622ba5df04921Bd03a7abab3f6328&channel_ids=,&fpr=c874c715b2faad8885ad1254850d8d74&loc=http%3A%2F%2Fforum.mobilism.org%2Fviewtopic.php%3Ff%3D1292%26t%3D652520&referer=http%3A%2F%2Fforum.mobilism.org%2Fviewtopic.php%3Ff%3D1292%26t%3D652520&cb=78291847'
> > 2013/11/11 02:20:13 kid1| WARNING: unparseable HTTP header field {:: }
>
> I means the response to the URL shown contains corrupted HTTP headers.
> Something outside the HTTP protool has been injected, So Squid will drop
> the header, if relaxed_header_parser is disabled then the whole response
> is dropped.

Since I'm also seeing that, I'd guess lijit.com is having issues.

-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
ralf.hildebrandt_at_charite.de        Campus Benjamin Franklin
http://www.charite.de              Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155
Received on Tue Nov 12 2013 - 09:46:31 MST

This archive was generated by hypermail 2.2.0 : Tue Nov 12 2013 - 12:00:06 MST