On Wed, Aug 20, 2008 at 2:35 PM, Mike Kershaw <[EMAIL PROTECTED]> wrote:
> On Wed, Aug 20, 2008 at 02:32:01PM -0400, John Mort wrote:
> > Yesterday my company received a new printer. The printer comes with a web
> > interface that lets it easily be installed on windows clients, however
> > certain applications didn't appear to like the printer so I figured I'd
> try
> > installing it on the CUPS server and installing it on the clients that
> way.
> > After I added the printer to CUPS, every two minutes the printer receives
> a
> > print job from users "Unknown", and prints out the following:
> >
> > POST / HTTP/1.1
> > Content-Length: 288
> > Content-Type: application/ipp
> > Host: 192.168.111.4 (this is the printers IP)
> > User-Agent: CUPS/1.3.7
> > Expect: 100-continue
> >
> > Then what appears to be two lines of text printed over top each other. I
> > tried disabling ipp on the printer, hoping this would make it ignore the
> > strange print requests, yet they still keep coming. The job log in CUPS
> > doesn't show anything like this. I'm not sure what to do. Has anyone had
> a
> > problem like this before?
>
> Sounds like the printer is interpreting a status query as a print
> command?
>
> Put a packet sniffer on the cups box and grab the frame it sends and see
> what the query contains?
>
> -m
>
>
I ran wireshark for a bit, right clicked a packed going from the CUPS server
to the printer that had the heading POST / HTTP/1.1 and selected "Follow TCP
Stream" and get this conversation:
*POST / HTTP/1.1
Content-Length: 286
Content-Type: application/ipp
Host: 192.168.111.4
User-Agent: CUPS/1.3.7
Expect: 100-continue
G attributes-charset utf-8H attributes-natural-language en-usE
printer-uri http://192.168.111.4:80/D requested-attributes
copies-supportedD document-format-supportedD
printer-is-accepting-jobsD
printer-stateD printer-state-messageD printer-state-reasonsHTTP/1.1
405 Method Not Allowed
Date: Wed, 20 Aug 2008 18:45:19 GMT
Server: Apache
Vary: accept-language
Allow: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, PATCH, PROPFIND,
PROPPATCH, MKCOL, COPY, MOVE, LOCK, UNLOCK, TRACE
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
120
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>405 Method Not Allowed</TITLE>
</HEAD><BODY>
<H1>Method Not Allowed</H1>
The requested method POST is not allowed for the URL /.<P>
<HR>
<ADDRESS>Apache/1.3.37 Server at 192.168.111.4 Port 80</ADDRESS>
</BODY></HTML>
0
*
If you have any suggestions I'd love to hear them. In the meantime I think
I'm going to try removing the printer from CUPS again and restarting CUPS
and hoping that makes it stop. ;-)
--
John D. Mort
http://john.mort.net
_______________________________________________
Mid-Hudson Valley Linux Users Group http://mhvlug.org
http://mhvlug.org/cgi-bin/mailman/listinfo/mhvlug
Upcoming Meetings (6pm - 8pm) MHVLS Auditorium
Jun 4 - Sqeak! and eToys
Jul 2 - KVM (Tenative)
Aug 6 - Zenos
Sep 3 - TBD
