On Wed, 2006-08-23 at 20:36 -0400, Daniel Ouellet wrote: > 200.82.74.176 - - [23/Aug/2006:12:42:37 -0400] "GET > /events/index.php?EventID=58 HTTP/1.1" 200 5 "-" "Mozilla/4.0 > (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
the following URL may be of interest to you: http://grotto11.com/blog/slash.html?+1039831658 basically it comes down to this, in order for IE to "appear" faster, it will perform an inproper handshake to start the HTTP transfer sooner. IIS will actually respond to this and immediately start the transfer. This is yet another stupid little hack from Microsoft to make their products to appear faster or better than the rest. since you are running a normal web server, it doesn't like this and will actually kick back and tell IE to start over, this time doing it correctly. so, this may explain all those connections with no content. IE is trying to perform it's "quick" connect and transfer hoping that you are running IIS, only to be told from your webserver to try again correctly. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219-4444 ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]