[squid-users] Many clients "0.0.0.0" in access.log

Hello,

Few weeks ago, I changed my old Alphaserver/Tru64Unix4.0E/squid-2.3STABLE1
for a new Alphastation XP1000/Tru64Unix5.1/squid-2.3STABLE4 plus patches.

Now, I can see many (thousands per week) logs in access.log for an
unknown client "0.0.0.0", and just few lines after, requests for an
identical URL with a correct client (one of mine, 161.3.X.Y), such
as (begining of lines were intentionnally deleted):

--- CUT ---

0.0.0.0 TCP_DENIED/403 0 GET http://static.everyday.com/eday_logo.gif - NONE/- -
161.3.47.25 TCP_HIT/200 0 GET http://static.everyday.com/slimUI/up_left.gif - NO
NE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.free.fr/im/4_on.gif - NONE/- -
161.3.83.41 TCP_IMS_HIT/304 224 GET http://www.free.fr/im/6_on.gif - NONE/- imag
e/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.citationsdumonde.com/themas/pictos/journ
aliste.gif - NONE/- -
161.3.83.46 TCP_HIT/200 3987 GET http://www.citationsdumonde.com/themas/pictos/b
ouvard.gif - NONE/- image/gif
0 0.0.0.0 TCP_DENIED/403 0 GET http://mailv2.voila.fr/cgi-bin/webmail.exe? - NON
E/- -
161.3.89.4 TCP_MISS/000 0 GET http://mailv2.voila.fr/cgi-bin/webmail.exe? - DIRE
CT/mailv2.voila.fr -
0.0.0.0 TCP_DENIED/403 0 GET http://www.europcar.fr/france/images/men_puce.gif -
 NONE/- -
161.3.9.88 TCP_MISS/000 0 GET http://www.europcar.fr/france/images/men_puce.gif
- DIRECT/www.europcar.fr -
0.0.0.0 TCP_DENIED/403 0 GET http://www.kiwee.com/Datas/Images/menu/play_right.g
if - NONE/- -
161.3.84.91 TCP_IMS_HIT/304 224 GET http://www.kiwee.com/Datas/Images/menu/kiwee
_sms.gif - NONE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.topmanga.com/clipart/tri.gif - NONE/- -
161.3.84.93 TCP_HIT/200 1187 GET http://www.topmanga.com/clipart/tri.gif - NONE/
- image/gif
0.0.0.0 TCP_DENIED/403 0 POST http://www5.caramail.com/cgi-bin/SelectAction - NO
NE/- -
161.3.81.58 TCP_MISS/000 0 POST http://www5.caramail.com/cgi-bin/SelectAction -
DIRECT/www5.caramail.com -
0.0.0.0 TCP_DENIED/403 0 POST http://www5.caramail.com/cgi-bin/SelectAction - NO
NE/- -
161.3.81.58 TCP_MISS/000 0 POST http://www5.caramail.com/cgi-bin/SelectAction -
DIRECT/www5.caramail.com -
0.0.0.0 TCP_DENIED/403 0 GET http://www.multimania.com/kitweb/spacer.gif - NONE/
- -
161.3.84.93 TCP_MISS/302 631 GET http://www.multimania.com/kitweb/spacer.gif - D
IRECT/www.multimania.com text/html
0.0.0.0 TCP_DENIED/403 0 GET http://www.kiwee.com/Datas/Images/vitamines/vit-men
u_on_04.gif - NONE/- -
161.3.84.91 TCP_IMS_HIT/304 224 GET http://www.kiwee.com/Datas/Images/vitamines/
vit-menu_on_03.gif - NONE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://216.33.240.24/icon_messenger6.gif - NONE/- -
161.3.47.70 TCP_MISS/000 0 GET http://216.33.240.24/icon_messenger6.gif - DIRECT
/216.33.240.24 -
0.0.0.0 TCP_DENIED/403 0 GET http://www.microsoft.com/france/windows/images/prev
u-win95.gif - NONE/- -
161.3.80.58 TCP_HIT/200 2867 GET http://www.microsoft.com/france/windows/images/
prevu-ppc.gif - NONE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.bspp.fr/Interfac/B_Rubb.GIF - NONE/- -
161.3.81.14 TCP_MEM_HIT/301 563 GET http://www.bspp.fr/Interfac/B_Rubd.GIF - NON
E/- text/html
0.0.0.0 TCP_DENIED/403 0 GET http://www.multimania.com/jnaime/boutons/utilitaire
sr.gif - NONE/- -
161.3.84.94 TCP_MEM_HIT/200 0 GET http://www.multimania.com/jnaime/boutons/filmr
.gif - NONE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://mangaxchanges.free.fr/images/dent.gif - NONE
/- -
161.3.84.93 TCP_IMS_HIT/304 223 GET http://mangaxchanges.free.fr/images/RKVendet
ta.jpg - NONE/- image/jpeg
0.0.0.0 TCP_DENIED/403 0 GET http://static.everyday.com/slimUI/up_left.gif - NON
E/- -
161.3.47.22 TCP_HIT/200 0 GET http://static.everyday.com/t.gif - NONE/- image/gi
f
0.0.0.0 TCP_DENIED/403 0 GET http://www.multimania.com/fastemulation/Codes/Progr
ames/Divers/logo.gif - NONE/- -
161.3.47.76 TCP_MISS/404 1414 GET http://www.multimania.com/fastemulation/Codes/
Programes/Divers/etajvpsx648.exe - DIRECT/www.multimania.com text/html
0.0.0.0 TCP_DENIED/403 0 GET http://www.pari-roller.com/images/flag_us.gif - NON
E/- -
161.3.81.32 TCP_HIT/200 4014 GET http://www.pari-roller.com/images/flag_fr.gif -
 NONE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.itea.fr/G42/images/403 0 GET http://www.
itea.fr/G42/images/
161.3.80.102 TCP_HIT/000 4031 GET http://www.itea.fr/G42/images/forez_26-forez_1
6_over.gif - NONE/- -
0.0.0.0 TCP_DENIED/403 0 GET http://pub.libertysurf.fr/js.ng/Params.richmedia=ye
s&category=/chez_bandeau/popup/medias&site=chez - NONE/- -
161.3.81.33 TCP_MEM_HIT/200 833 GET http://pub.libertysurf.fr/html.ng/category=/
chez_bandeau/popup/medias&site=chez - NONE/- text/html
0.0.0.0 TCP_DENIED/403 0 GET http://www.phonevalley.com/images_in/_bt_fleche.gif
 - NONE/- -
161.3.18.11 TCP_HIT/200 0 GET http://www.phonevalley.com/images_in/_bt_fleche.gi
f - NONE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.studyrama.com/supjeunes/editwebsupjeunes
.nsf/Internet/V2NavN/$FILE/nav5b.gif - NONE/- -
161.3.10.175 TCP_MISS/000 0 GET http://www.studyrama.com/supjeunes/editwebsupjeu
nes.nsf/Internet/V2NavN/$FILE/nav7b.gif - DIRECT/www.studyrama.com -
0.0.0.0 TCP_DENIED/403 0 GET http://nicg.free.fr/trucalacon/trucon2.gif - NONE/-
 -
161.3.10.246 TCP_IMS_HIT/304 224 GET http://nicg.free.fr/trucalacon/trucon1.gif
- NONE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.eads-nv.com/sys/px/nav/block_r_grau.gif
- NONE/- -
161.3.81.17 TCP_HIT/200 377 GET http://www.eads-nv.com/sys/px/nav/block_r_grau.g
if - NONE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.alsdesign.fr/imginterfaces/bandelong.jpg
 - NONE/- -
161.3.51.71 TCP_HIT/200 5119 GET http://www.alsdesign.fr/scrolltext.class - NONE
/- java/*
0.0.0.0 TCP_DENIED/403 0 GET http://www.campus.ecp.fr/~gala/nouveausite/bars/bar
re/pics/barrebars_r11_c1_f2.gif - NONE/- -
161.3.15.15 TCP_MISS/200 447 GET http://www.campus.ecp.fr/~gala/nouveausite/bars
/barre/pics/barrebars_r40_c1.gif - DIRECT/www.campus.ecp.fr image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.lycos.fr/graphics/dog/cool_dog_nonanim.g
if - NONE/- -
161.3.81.22 TCP_IMS_HIT/304 222 GET http://www.lycos.fr/graphics/general/redarro
w.gif - NONE/- image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://195.25.89.17/club_v? - NONE/- -
161.3.81.22 TCP_MISS/200 329 GET http://195.25.89.17/club_v? - DIRECT/195.25.89.
17 image/gif
0.0.0.0 TCP_DENIED/403 0 GET http://www.goodluck-city.com/images/loterie/nombre4
2.gif - NONE/- -
161.3.81.21 TCP_HIT/200 540 GET http://www.goodluck-city.com/images/loterie/nomb
re02.gif - NONE/- image/gif

--- CUT ---

Suggestions are welcome,

-- 
_______________________________________________________________________
Magali BERNARD (Magali.Bernard@univ-st-etienne.fr)
CRITeR - 23 rue du Dr Paul Michelon - 42023 St-Etienne Cedex 2 - FRANCE
Tel: 04.77.48.50.62 Fax: 04.77.48.50.69