Our Squid has long been constantly putting some strange lines in cache.log:
2007/06/12 11:15:45| parseHttpRequest: Requestheader contains NULL
characters
2007/06/12 11:15:45| parseHttpRequest: Unsupported method '^C'
2007/06/12 11:15:45| clientReadRequest: FD 930 (x.x.x.x:2649) Invalid
Request
2007/06/12 11:15:45| parseHttpRequest: Requestheader contains NULL
characters
2007/06/12 11:15:45| parseHttpRequest: Unsupported method '^C'
2007/06/12 11:15:45| clientReadRequest: FD 145 (x.x.x.x:62332) Invalid
Request
2007/06/12 11:15:48| parseHttpRequest: Requestheader contains NULL
characters
2007/06/12 11:15:48| parseHttpRequest: Unsupported method '^C'
2007/06/12 11:15:48| clientReadRequest: FD 1611 (x.x.x.x:60853) Invalid
Request
2007/06/12 11:15:49| parseHttpRequest: Requestheader contains NULL
characters
2007/06/12 11:15:49| parseHttpRequest: Unsupported method '^C'
ad nauseum (the IP addresses need not be the same) at a rate of 30-40
megs a day. Does someone know what the reason could be, even if it's
unrelated to Squid (I'm not sure)?
Here's an example of one typical erroneous TCP stream flow processed by
Ethereal/Wireshark, and shown here in all its ASCII glory. Any tips
appreciated.
........|.2.|....j.s....|..?|..=...K.H...~..|....Z.#|....v..|<.m.........n.G.t...J...p.1.f...........(.I.^.....5.:.....a.V.O.......[...y.N...T.e.*.3.P...F...............>.W.............6.....-.....x.......4..|
...0...&._.l.]...k....|..........C|..!.........r..|X.9...g...%.......Q.....L...b.....i....|..U...........o....|R2{|8.............S.........,...B.+|...|..w|d......|`.........M.2.........'........|...|.....0}.".....).....D.....c.@.A.../.|.....;...Y......
E.......q............
HTTP/1.0 400 Bad Request
Server: squid/2.6.STABLE13
Date: Wed, 13 Jun 2007 08:45:51 GMT
Content-Type: text/html
Content-Length: 1180
Expires: Wed, 13 Jun 2007 08:45:51 GMT
X-Squid-Error: ERR_INVALID_REQ 0
X-Cache: MISS from cache.net
Via: 1.0 cache.net:8080 (squid/2.6.STABLE13)
Proxy-Connection: close
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;
charset=iso-8859-1">
<TITLE>ERROR: The requested URL could not be retrieved</TITLE>
<STYLE
type="text/css"><!--BODY{background-color:#ffffff;font-family:verdana,sans-serif}PRE{font-family:sans-serif}--></STYLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>The requested URL could not be retrieved</H2>
<HR noshade size="1px">
<P>
While trying to process the request:
<PRE>
.
</PRE>
<P>
The following error was encountered:
<UL>
<LI>
<STRONG>
Invalid Request
</STRONG>
</UL>
<P>
Some aspect of the HTTP Request is invalid. Possible problems:
<UL>
<LI>Mi
ssing or unknown request method
<LI>Missing URL
<LI>Missing HTTP Identifier (HTTP/1.0)
<LI>Request is too large
<LI>Content-Length missing for POST or PUT requests
<LI>Illegal character in hostname; underscores are not allowed
</UL>
<P>Your cache administrator is <A
HREF="mailto:admin@cache.net">admin@cache.net</A>.
<BR clear="all">
<HR noshade size="1px">
<ADDRESS>
Generated Wed, 13 Jun 2007 08:45:51 GMT by cache.net (squ
id/2.6.STABLE13)
</ADDRESS>
</BODY></HTML>
..........
......j.s.......?...=..0K.HM.q~.......Z.#.....v...<.m.........n.G.t...J...p.1.f...........(.I.^
...
5.:.....a.V.O.......[...y.N...T.e.*.3.P...F...............>9W0.......|....60....-.....x!.|....4h..
...0...&._.l.]...k..............hC..o!a........r..|X.9q..g..1%..0....Q..0..L...b!.q..i|.M.q..U...........o.....R
{.8.............S......0..,M.qB.+.......w.d.......`.........M.2.........'...................}."....L)..!.|D.....c.@.A.../.|....-;h..Y..-.h..E.......q.............h..|..7.$.u.z2..
!.|...
..............|.;j.s..|.;.
?...=..DK.H...~.......Z.#|.F..v1..<2m.........n.G|t1..J...p.1|f......|.1..(.I.^.....5.:t....a.V.O.......[..Sy.NS.qT.e.*.3.P...F..|...|.......|>.W|...|...|...|6.....-..2..x.......4...
...0S..&._.l.]...k........|......C...!........|rC..X.9...g...%.......Q.....L...bB.q..i.......U..........1o..1..R.{.8A.q.A.q.a.H..S.........,...B.+M......w.d......0`....1....M.2.........'............|...|..}."..|..)|....D.....c.@9A0../.|.....;...Y..9.0
Received on Thu Jun 14 2007 - 23:44:49 MDT
This archive was generated by hypermail pre-2.1.9 : Sun Jul 01 2007 - 12:00:04 MDT