On 27/11/2013 1:00 a.m., Grooz, Marc (regio iT) wrote:
> In my first case:
> 
> Squid request:
> 
> -MGET 
> /cgi-bin/upload_status.cgi?uid=060950223627&files=:iso-27001-router-security-audit-checklist.xls&ok=1
>  HTTP/1.1
> Accept: text/html, application/xhtml+xml, */*
> 
> Webserver answer:
> [-MHTTP/1.1 200 OK
> Date: Mon, 25 Nov 2013 12:48:57 GMT

>> Squid send the first request again and again.
> 
> Direct request without squid:
> 
> Gm/GET /cgi-bin/upload_status.cgi?uid=318568766743&files=:aukirche.JPG&ok=1 
> HTTP/1.1
> 
> Webserver answer:
> GmHTTP/1.1 200 OK

> 
>> Website gets displayed.
> 


Are those "-M" "Gm/" cgaracters really in front of the GET method name
and the HTTP/1.1 response version label?

It looks like you may be receiving SOCKS protocol traffic.

Amos

Reply via email to