Re: Any idea what's causing this?

From: Dave Millen (postmaster@[127.0.0.1)
Date: 03/11/03 

From: "Dave Millen" <postmaster@[127.0.0.1]>
Date: Tue, 11 Mar 2003 15:26:18 +0000

In article <b4kt15$ina$1@atlantis.news.tpi.pl>, "Wojtek Walczak"
<gminick@hacker.pl> wrote:

> Dnia Tue, 11 Mar 2003 02:34:58 +0000, Dave Millen napisał(a):
>> [**] [1:499:3] ICMP Large ICMP Packet [**] [Classification: Potentially
>> Bad Traffic] [Priority: 2] 03/11-01:47:33.382703 208.129.0.183 ->
>> 81.101.31.145 ICMP TTL:243 TOS:0x0 ID:17567 IpLen:20 DgmLen:1500 DF
>> Type:8 Code:0 ID:0 Seq:0 ECHO
>> [Xref => arachnids 246]
> DF bit set and DmgLen of a packet was larger than MTU at 208.129.0.183.
>
>> apache log
>> *********
>> 208.129.12.254 - - [11/Mar/2003:01:47:34 +0000] "GET
>> /search_connections.php?searchfield=interests&search_text=EARL%20DUNN&gender=Male&country=us&match=any
>> HTTP/1.1" 200 12311 208.129.12.254 - - [11/Mar/2003:01:50:52 +0000]
>> "GET
>> /search_connections.php?searchfield=interests&search_text=EARL%20DUNN&gender=Male&country=us&match=any
>> HTTP/1.1" 200 8001
> Well, nothing really strange as long as you're providing a possibility
> to run search_connections.php script on your HTTP server. Apache
> returned code 200 which means 'OK' for both: HTTP/1.0 and HTTP/1.1.
>

Yes, I know all of the above. My question was: has anyone seen seen this
behaviour where a client pings the server before sending an HTTP request
via a caching proxy. I certainly haven't and you have not shed any light
on the issue.

Regards,
Dave 

-- 
Microsoft Scandisk
------------------
Because your computer was not properly shut down, one or more
of your drives may contain errors.
To avoid seeing this message again, shut down your computer 
by selecting 'Shut Down' from the 'Start' menu and leave it 
switched off.