Re: [squid-users] WARNING: unparseable HTTP header field

I'd guess it's a worm attempting to either hit your squid, or go through
it to another web server (depending on how your squid is set up).
But then, Im not an expert either, so I might be waaaayyy off.

Tim

Lucia Di Occhi wrote:

> I am getting a lot of the following in my cache.log, as anyone seen it
> before and/or can take a wild guess?
>
> 2005/09/11 23:19:36| WARNING: unparseable HTTP header field
> {N*!!!PT!!!U_~~~~~~8OQVn8PP>0!!!NB!!!)2~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0
>
> !!!NB!!!)<~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0~!!!)=~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0~";
> lf="b!!!!*!!!DJ!!!!$!
> !#Eh!!!!$!!#UM!!!!$!!#b'!!!!#!!#b9!!!!$!!#dx!!!!$!!#e7!!!!#"}
> 2005/09/11 23:22:01| WARNING: unparseable HTTP header field
> {N*!!!PT!!!U_~~~~~~8OQVn8PP>0!!!NB!!!)2~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0
>
> !!!NB!!!)<~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0~!!!)=~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0~";
> lf="b!!!!*!!!DJ!!!!$!
> !#Eh!!!!$!!#UM!!!!$!!#b'!!!!#!!#b9!!!!$!!#dx!!!!$!!#e7!!!!#"}
> 2005/09/11 23:22:06| WARNING: unparseable HTTP header field
> {N*!!!PT!!!U_~~~~~~8OQVn8PP>0!!!NB!!!)2~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0
>
> !!!NB!!!)<~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0~!!!)=~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0~";
> lf="b!!!!*!!!DJ!!!!$!
> !#Eh!!!!$!!#UM!!!!$!!#b'!!!!#!!#b9!!!!$!!#dx!!!!$!!#e7!!!!#"}
> 2005/09/11 23:22:21| WARNING: unparseable HTTP header field
> {N*!!!PT!!!U_~~~~~~8OQVn8PP>0!!!NB!!!)2~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0
>
> !!!NB!!!)<~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0~!!!)=~!!!1t!!!7T!!!<^~!#Ds0*E[XF![(N*!!!PT!!!U_~~~~~~8OQVn8PP>0~";
> lf="b!!!!*!!!DJ!!!!$!
> !#Eh!!!!$!!#UM!!!!$!!#b'!!!!#!!#b9!!!!$!!#dx!!!!$!!#e7!!!!#"}
>
> I am also getting plenty of this:
>
> 2005/09/11 23:37:05| WARNING: unparseable HTTP header field
> {403,14,URL,/vanityParser.cfm}
> 2005/09/11 23:37:05| WARNING: unparseable HTTP header field
> {404,*,URL,/test.htm}
> 2005/09/11 23:37:05| WARNING: unparseable HTTP header field
> {500,100,URL,/iisHelp/common/500-100.asp}
>
> _________________________________________________________________
> Is your PC infected? Get a FREE online computer virus scan from
> McAfee® Security.
> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
>
>

**********************************************************************
This message is intended for the addressee named and may contain
privileged information or confidential information or both. If you
are not the intended recipient please delete it and notify the sender.
**********************************************************************
Received on Sun Sep 11 2005 - 23:34:37 MDT