Re: [squid-users] Strange entries from my log

* Amos Jeffries <squid3_at_treenet.co.nz>:
> On 15/10/2013 1:32 a.m., Ralf Hildebrandt wrote:
> >I'm running 3.4.x with c-icap, and every now and then I'm seeing this
> >in my log:
> >
> >Oct 14 09:06:47 proxy-cvk-1 squid[12081]: internalStart: unknown request:#012GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1#015#012Host: c-69-250-37-253.hsd1.dc.comcast.net#015#012User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0#015#012Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8#015#012Accept-Language: en-US,en;q=0.5#015#012Accept-Encoding: gzip, deflate#015#012Connection: keep-alive#015#012#015#012
> >Oct 14 09:44:15 proxy-cvk-1 squid[12081]: helperHandleRead: unexpected read from redirector #1, 1 bytes '#012'
> >
> >Do you have any ide what this might be?
>
> 012 and 015 are the octal numerics for CR and LF. (why its displaying
> in octal instead of hex I do not know).
>
> Do you have strict HTTP parsing enabled?

relaxed_header_parser is left at it's default.

Squid 3.4 is built using:

./configure --prefix=/usr --includedir=\${prefix}/include
--mandir=\${prefix}/share/man \
--infodir=\${prefix}/share/info --sysconfdir=/etc \
--localstatedir=/var --libexecdir=\${prefix}/lib/squid3 \
--disable-maintainer-mode --disable-dependency-tracking \
--disable-silent-rules --srcdir=. --datadir=\${prefix}/share/squid3 \
--sysconfdir=/etc/squid3 --mandir=/usr/share/man \
--with-cppunit-basedir=/usr --enable-inline --enable-async-io=6 \
--enable-storeio=aufs --enable-removal-policies=lru,heap \
--enable-underscores --enable-icap-client
--enable-follow-x-forwarded-for \
--enable-snmp --with-filedescriptors=65536 \
--with-large-files --with-default-user=proxy --enable-epoll \
--disable-ipv6

> That can be enabled either with --disable-http-violations or the
> squid.conf directive relaxed_header_parser set to "off" or "warn".
> If enabled it will strictly follow the rules of HTTP regarding
> useless whitespace between message blocks and the first line above
> can appear.

So maybe I should enable this...

-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
ralf.hildebrandt_at_charite.de        Campus Benjamin Franklin
http://www.charite.de              Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155