> > I think the interesting is what happened in access.log within > the minute > before this started to get logged. > The interesting thing is that nothing happened in the minute before: 1215876747.011 0 192.168.3.111 TCP_DENIED/403 1448 GET http://www.google.com/ - NONE/- text/html 1215876956.146 7100 192.168.0.20 TCP_MISS/200 304 GET http://report.bitdefender.com/rtvr? - DIRECT/80.86.106.67 - 1215877347.015 0 192.168.3.111 TCP_DENIED/403 1448 GET http://www.google.com/ - NONE/- text/html 1215877896.495 327 192.168.0.25 TCP_MISS/200 528 GET http://update.bitdefender.com/_getmirror? - DIRECT/66.132.221.68 text/xml -- tim --
