Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] this traffic pattern indicates what?

From: Sake Blok <sake@xxxxxxxxxx>
Date: Tue, 18 Nov 2008 00:09:19 +0100
On Sat, Nov 01, 2008 at 10:16:30AM +0100, Sake Blok wrote:
> On Fri, Oct 31, 2008 at 04:58:48PM -0700, Linnea Wren wrote:
> > 
> >    In one file of 101,428 packets, this kind of traffic accounts for
> >    approximately 25% of IP conversations, and 50% of TCP streams.
[...]
> Yes, it seems like there are people probing your webserver to see
> whether it is an open proxy. I'm not a webmaster, but I can imagine that
> that's "normal" traffic these days :(  The real problem I think is the
> loop that the 302 is creating. Have your server issue a 404 for every
> unknown site and I think you will see an improvement in your servers
> reachability.

Were you able to reduce these spikes of traffic by changing the way
unknown pages are handled?

Cheers,
    Sake