Wireshark-users: Re: [Wireshark-users] this traffic pattern indicates what?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Sake Blok <sake@xxxxxxxxxx>
Date: Tue, 18 Nov 2008 00:09:19 +0100
On Sat, Nov 01, 2008 at 10:16:30AM +0100, Sake Blok wrote:
> On Fri, Oct 31, 2008 at 04:58:48PM -0700, Linnea Wren wrote:
> > 
> >    In one file of 101,428 packets, this kind of traffic accounts for
> >    approximately 25% of IP conversations, and 50% of TCP streams.
[...]
> Yes, it seems like there are people probing your webserver to see
> whether it is an open proxy. I'm not a webmaster, but I can imagine that
> that's "normal" traffic these days :(  The real problem I think is the
> loop that the 302 is creating. Have your server issue a 404 for every
> unknown site and I think you will see an improvement in your servers
> reachability.

Were you able to reduce these spikes of traffic by changing the way
unknown pages are handled?

Cheers,
    Sake