[squid-users] Re: WARNING: unparseable HTTP header field {:: }

From: Dr.x <ahmed.zaeem_at_netstream.ps>
Date: Tue, 12 Nov 2013 02:12:53 -0800 (PST)

Ralf Hildebrandt wrote
> * Amos Jeffries &lt;

> squid3@.co

> &gt;:
>> On 12/11/2013 9:08 p.m., Dr.x wrote:
>> > hi ,
>> > is that harmfull log ??
>> > ====================================================================
>> > 2013/11/11 02:20:12 kid2| WARNING: unparseable HTTP header field {:: }
>> > 2013/11/11 02:20:13 kid1| ctx: exit level 0
>> > 2013/11/11 02:20:13 kid1| ctx: enter level 0:
>> >
>> 'http://vap2iad3.lijit.com/www/delivery/lg.php?bannerid=38827&campaignid=232&cids=232&bids=38827&zoneid=220681&retarget_matches=null&tid=1075526134_220681_a90622ba5df04921Bd03a7abab3f6328&channel_ids=,&fpr=c874c715b2faad8885ad1254850d8d74&loc=http%3A%2F%2Fforum.mobilism.org%2Fviewtopic.php%3Ff%3D1292%26t%3D652520&referer=http%3A%2F%2Fforum.mobilism.org%2Fviewtopic.php%3Ff%3D1292%26t%3D652520&cb=78291847'
>> > 2013/11/11 02:20:13 kid1| WARNING: unparseable HTTP header field {:: }
>>
>> I means the response to the URL shown contains corrupted HTTP headers.
>> Something outside the HTTP protool has been injected, So Squid will drop
>> the header, if relaxed_header_parser is disabled then the whole response
>> is dropped.
>
> Since I'm also seeing that, I'd guess lijit.com is having issues.
>
> --
> Ralf Hildebrandt Charite Universitätsmedizin Berlin

> ralf.hildebrandt@

> Campus Benjamin Franklin
> http://www.charite.de Hindenburgdamm 30, 12203 Berlin
> Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155

well , if this is just error for lijit.com website , i can remove
redirecting this website to squid and let my head clear.

but if it face to alot of sites i will try to solve it :)

but any way ,
almost all logs of this type is belongs to lijit.com only !!.

if i found another logs to another sites , i will post it here

regards

-----
Dr.x

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/WARNING-unparseable-HTTP-header-field-tp4663232p4663239.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Tue Nov 12 2013 - 10:13:40 MST

This archive was generated by hypermail 2.2.0 : Tue Nov 12 2013 - 12:00:06 MST