You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris <cp...@earthlink.net> on 2005/08/25 13:31:05 UTC
spamd[7745]: bad protocol: header error:
Noted this in my syslog this morning, is this another harmless error, or is
something borked somewhere?
Aug 24 21:30:09 cpollock spamd[7745]: bad protocol: header error:
\200__( '$Î__________\206 __\2377____________________\200__( '$Ï__________
\206¡__\2377____________________\200__( '$Ð__________\206¢__\2377__________
__________\200__( '$Ñ__________\206£__\2377____________________\200__(`'$Î__
________\206 __\2377____________________\200__(`'$Ï__________\206¡__\2377_
___________________\200__(`'$Ð__________\206¢__\2377____________________\
200__(`'$Ñ__________\206£__\2377____________________\200__( '$Î__________\
206 __\2377____________________\200__( '$Ï__________\206¡__\2377__________
__________\200__( '$Ð__________\206¢__\2377____________________\200__( '$Ñ_
_________\206£__\2377____________________
Aug 24 21:30:40 cpollock spamd[7799]: bad protocol: header error: GET /
HTTP/1.0
Aug 24 21:30:41 cpollock spamd[7799]: bad protocol: header error:
Aug 24 21:30:41 cpollock spamd[7816]: bad protocol: header error: OPTIONS /
HTTP/1.0
Aug 24 21:30:41 cpollock spamd[7816]: bad protocol: header error: OPTIONS /
RTSP/1.0
Aug 24 21:30:45 cpollock imapd-ssl: Unexpected SSL connection shutdown.
Aug 24 21:30:45 cpollock pop3d-ssl: Unexpected SSL connection shutdown.
Aug 24 21:30:46 cpollock spamd[7817]: bad protocol: header error:
\200__(rþ____________\206 __\227|____________________
Aug 24 21:30:50 cpollock imapd-ssl: Unexpected SSL connection shutdown.
Aug 24 21:30:50 cpollock imapd-ssl: Unexpected SSL connection shutdown.
Aug 24 21:30:50 cpollock pop3d-ssl: Unexpected SSL connection shutdown.
Aug 24 21:30:50 cpollock pop3d-ssl: Unexpected SSL connection shutdown.
Aug 24 21:30:51 cpollock spamd[7817]: bad protocol: header error:
_______________version_bind_____
Aug 24 21:30:56 cpollock spamd[7846]: bad protocol: header error:
______________
Aug 24 21:30:56 cpollock spamd[7846]: bad protocol: header error: HELP
Aug 24 21:30:57 cpollock spamd[7852]: bad protocol: header error:
____S___O__?G×÷º,îê²`~ó_ý\202{¹Õ\226Èw\233æÄÛ<=Ûoï_n__(_____
Aug 24 21:31:02 cpollock spamd[7852]: bad protocol: header error:
___¤ÿSMBr______@______________@______\201__PC NETWORK PROGRAM 1.0__MICROSOFT
NETWORKS 1.03__MICROSOFT NETWORKS 3.0__LANMAN1.0__LM1.2X002__Samba__NT LANMAN
1.0__NT LM 0.12_
Aug 24 21:31:07 cpollock spamd[7859]: bad protocol: header error: l___________
Aug 24 21:31:07 cpollock spamd[7859]: bad protocol: header error: _default
Aug 24 21:31:12 cpollock spamd[7865]: bad protocol: header error:
0____`______\200_
Aug 24 21:31:17 cpollock spamd[7865]: bad protocol: header error:
TNMP____TNME____
Aug 24 21:31:22 cpollock spamd[7876]: bad protocol: header error: _____à_____
Aug 24 21:31:27 cpollock spamd[7876]: bad protocol: header error:
DmdT_______________ÿ_ÿ_
Aug 24 21:31:32 cpollock spamd[7887]: bad protocol: header
error: :___/______@_____=_____________/_________@__________________
Aug 24 21:31:36 cpollock spamd[7887]: bad protocol: header error:
___ýÎú_° ___MMS________________________ðððð________N_S_P_l_a_y_e_r_/_9_._0_._0_._2_9_8_0_;_
_{_0_0_0_0_A_A_0_0_-_0_A_0_0_-_0_0_a_0_-_A_A_0_A_-_0_0_0_0_A_0_A_A_0_A_A_0_}___àmß_
--
Chris
Registered Linux User 283774 http://counter.li.org
06:25:46 up 3 days, 18:09, 1 user, load average: 0.25, 0.18, 0.12
Mandriva Linux 10.1 Official, kernel 2.6.8.1-12mdk
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
* shortc wants to get in one of knghtbrd's sigs one of these days.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Re: spamd[7745]: bad protocol: header error:
Posted by Duncan Hill <sa...@nacnud.force9.co.uk>.
On Thursday 25 August 2005 12:31, Chris typed:
> Noted this in my syslog this morning, is this another harmless error, or is
> something borked somewhere?
>
> Aug 24 21:30:09 cpollock spamd[7745]: bad protocol: header error:
> \200__( '$Î__________\206 __\2377____________________\200__( '$Ï__________
> \206¡__\2377____________________\200__( '$Ð__________\206¢__\2377__________
> __________\200__(
> '$Ñ__________\206£__\2377____________________\200__(`'$Î__
> ________\206 __\2377____________________\200__(`'$Ï__________\206¡__\2377_
> ___________________\200__(`'$Ð__________\206¢__\2377____________________\
> 200__(`'$Ñ__________\206£__\2377____________________\200__( '$Î__________\
> 206 __\2377____________________\200__( '$Ï__________\206¡__\2377__________
> __________\200__( '$Ð__________\206¢__\2377____________________\200__( '$Ñ_
> _________\206£__\2377____________________
> Aug 24 21:30:40 cpollock spamd[7799]: bad protocol: header error: GET /
> HTTP/1.0
I'd guess your spamd is listening on a port that realplayer or similar thought
was a web server/audio server (and possibly an MS box based on one record).
Is your spamd exposed to the cruel internet, or protected by a firewall?