On Wed, 5 May 2010 09:21:09 -0700, Tory M Blue <tmblue@xxxxxxxxx> wrote: > On Tue, May 4, 2010 at 4:14 PM, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: >> On Tue, 4 May 2010 11:17:18 -0700, Tory M Blue <tmblue@xxxxxxxxx> wrote: >>> I'm seeing this error on occasion and trying to figure out how to >>> capture what is causing it. >>> >>> 2010/05/04 11:06:03| urlParse: Illegal character in hostname '!host!' >>> >>> >>> !host!. >>> >>> I've thought maybe it was actually in a URI but I've added access >>> logging with urlpath_regex -i \!host and nothing is matching. >> >> urlpath_regex matches the path+filename+query portion of the URL. >> >> Try with url_regex. >> >>> >>> Is the !host! possibly internal to squid? >> >> No. >> >>> >>> How do I go about capturing and figuring this out? >> >> If the url_regex does not capture it debug_options 84,9 will display all >> the headers going through squid. >> >> debug_options 23,3 will show the higher level URL parse and what its >> being >> split into. >> >> Amos > > Thanks Amos (catching the reply late). > > Odd that the added debug is not functioning, I've tried > > debug_options ALL,1 23,3 84,9 > > > And I don't get more than the ALL,1 information > > 2010/05/05 09:08:05| urlParse: Illegal character in hostname '!host!' > > And my access.log > > acl HTTP-SUSPECT url_regex \!host > > works with a generated bogus url: > > 1272997513.724 1 10.40.9.132 TCP_MISS/404 589 GET > http://cache01.gc.sv.domain.net/!host! - > FIRST_UP_PARENT/apps.domain.net text/html > > So I'm capturing if it's in the url, but I'm till getting the illegal > character, in cache.log but nothing in access.log. So I'm missing or > not capturing something. > > Very odd that my debug does not seem to be working however :) > > Tory Is there a later "debug_options ALL,1" somewhere? They can be multiple. Amos
