Re: strange LOG_NONE requests

From: Jason Haar <jason@dont-contact.us>
Date: Mon, 28 Oct 1996 09:55:48 +0000 (GMT)

On Sun, 27 Oct 1996, Duane Wessels wrote:

> cb@brewhq.swb.de writes:
> >>> 67.1.0.0
> >>> 170.50.0.0
> >>> 0.4.0.0
>
> LOG_NONE means that someone connected to the HTTP port, but did not
> make any sort of HTTP request. I.e. you get this if you make a
> connection and then disconnect it immediately.
>
> I have no idea why the IP numbers are goofy. They're simply taken
> from the sockaddr return parameter of the accept() call.

Nope - that's not it. I reported this several months ago in this list and
am still seeing the same symptoms. We are behind a firewall which
explicitly denies access from the outside world on our squid server's
squid port - so I _know_ these are not connections from outside hosts.
What OSes are people seeing this affect with - we're running Linux 2.0.xx.
Sounds to me it's either a bug with Squid or with the OS's accept call...

Cheers,
+++++++++++++++++++++++++++++++++++++++++++++++
Jason Haar, Unix/Internet Manager
OiT, Oxford. Phone: +44 1865 785051
Received on Mon Oct 28 1996 - 01:55:58 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:33:23 MST