I have just turned up a squid farm here after having
it down for almost a year. Upgraded to squid-2.3.STABLE4-10,
on Redhat 7.1. I am seeing requests in the access.log
that have the IP address of the cache itself in them.
This cache's IP address is 208.206.76.60, you can see
its own IP is in the request.
Here are some examples:
1000407076.046 5 207.254.211.16 NONE/411 1365 POST
http://208.206.76.60/servlet/dlwLogin.DLLoginServlet? - NONE/- -
1000407083.134 2 207.254.211.16 NONE/411 1368 POST
http://208.206.76.60/servlet/dlwLogin.DLLoginServlet? - NONE/- -
1000410073.068 6 207.254.208.18 NONE/411 1897 POST
http://208.206.76.60/7/2047/1243/msnbc/videoweb.msnbc.com/msnbc/video/modem/n_bush_tear_010913.asf
- NONE/- -
1000410075.893 3 207.254.202.170 NONE/411 1573 GET
http://208.206.76.60/default.ida? - NONE/- -
1000410075.901 3 207.254.202.170 NONE/411 1573 GET
http://208.206.76.60/default.ida? - NONE/- -
1000410075.908 98 207.254.204.38 TCP_MISS/503 1092 POST
http://208.206.76.60/scripts/nri/panelserver.dll/logdata -
DIRECT/208.206.76.60 -
Does anyone know what would cause this? The users say
they cannot get to those sites. One of them, runs some custom
software, that is obviously using port 80, (the first log entry
above, the DLL file), and says it won't "login" to his database.
Just trying to figure out what might be going on. Appreciate
any help, thanks.
Brian
-----------------------------------------------
Brian Feeny, CCIE #8036 email:signal@shreve.net
Network Engineer phone:318.222.2638x109
ShreveNet Inc. fax: 318.221.6612
Received on Thu Sep 13 2001 - 13:42:41 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:02:10 MST