Strange Real player activity

From: Robert Cohen <robert@dont-contact.us>
Date: Mon, 17 Apr 2000 21:07:55 +1000

Ive noticed strange entries in my access log presumably from real
player.
They look like

955969306.841 126 210.9.66.181 NONE/400 1632 GET
http://channels.real.com/getlatest.glh?PV=6.0.5.27&OS=WIN&L=en-US,%20en,%20*&LID=1033&ch=120+54+0+0+0&ch=72+39+0+0+0&ch=44+287+0+0+0&ch=52+505+0+0+0&ch=33+393+0+0+0&ch=73+19+0+0+0&ch=98+27+0+0+0&ch94+244+0+0+0&ch=16+478+0+0+0&ch=113+46+0+0+0&ch=51+116+0+0+0&ch=97+108+0+0+0
- NONE/- -

Notice that they dont say TCP hit or miss etc. They just have NONE.
The other odd thing is that they can appear from IP's that are denied
access to the cache.
IE ex customers who are with another ISP but havent changed their
settings cause these entries as well. Obviously, I can firewall these
out, the ACL's should be causing them to get DENIED.

They arent causing any real problems, but they look odd. What can cause
a NONE operation.

--
Robert Cohen - Network Administrator      
Apex Internet     
robert@apex.net.au     http://www.apex.net.au
Ph (02) 6247 2000      Fax: (02) 6247 2711
Received on Mon Apr 17 2000 - 05:11:46 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:52:57 MST