https://bugzilla.wikimedia.org/show_bug.cgi?id=53806
--- Comment #3 from Toby Negrin <[email protected]> --- From Mark Bergsma: Hi Diederik, On Sep 5, 2013, at 12:13 PM, Diederik van Liere <[email protected]> wrote: > We are seeing some odd tagging of Zero traffic where requests are being > tagged as Zero traffic while it does not fall within the cidr range of a > mobile carrier. > > Example: > > cp3011.esams.wikimedia.org 198278752 2013-07-30T06:47:59 > 0.000113249 178.115.XXX.XXX hit/200 345 GET > > http://ru.m.wikipedia.org/w/api.php?format=json&search=%D0%A1&action=opensearch&namespace=0&limit=15 > - application/json; charset=utf-8 > http://ru.m.wikipedia.org/wiki/%d0%a8%d0%b2%d0%b5%d1%86%d0%b8%d1%8f - > Mozilla/5.0 (compatible; MSIE 9.0; Windows Phone OS 7.5; Trident/5.0; > IEMobile/9.0; NOKIA; Lumia 610) de-AT zero=250-99 [snip] > P.S.: As the examples show, the issue is not simply the X-Forwarded-For > header, as for example for [1], neither 66.54.XXX.XXX, nor 1.38.XXX.XXX is in > the ranges of Aircell India, and the Beeline example above comes without a > X-Forwarded-For setting. > > [1] Here is a recent example for Aircell India: > cp1046.eqiad.wmnet 4331766631 2013-09-04T06:31:38 0.000135422 > 66.54.XXX.XXX hit/200 20 GET > http://meta.m.wikimedia.org/wiki/Special:RecordImpression?result=hide&reason=empty&country=IN&uselang=en&project=wikipedia&db=enwiki&bucket=0&anonymous=true&device=unknown > - image/png http://en.m.wikipedia.org/wiki/Sexy > 1.38.XXX.XXX Mozilla/5.0 (Series40; Nokia206/03.58; Profile/MIDP-2.1 > Configuration/CLDC-1.1) Gecko/20100401 S40OviBrowser/2.2.0.0.36 en > zero=404-01 Thanks for flagging this. I'll investigate it when I get an opportunity. I've already looked into the XFF header, which might be the culprit still. We (almost) always add an XFF header at the start of a request. However, unfortunately it's not being logged, as the logging program just checks what headers were received from the client, not what we add in VCL... -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
