anybody seen this? (POST /PAV_REL HTTP/1.0)

Tue Aug 7 20:06:13 UTC 2001

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Looks like Marimba Castanet, which is a tool for pushing content out to
server farms.  @Home has used it to populate their cable head-end servers,
for instance.   It is also used to push software updates to users.

See http://www.marimba.com.

> -----Original Message-----
> From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu]On Behalf Of
> Paul A Vixie
> Sent: Tuesday, August 07, 2001 11:06 AM
> To: nanog at merit.edu
> Subject: anybody seen this? (POST /PAV_REL HTTP/1.0)
> 
> 
> 
> while hunting codered, i started seeing quite a few of the following:
> 
> 	POST /PAV_REL HTTP/1.0
> 	User-Agent: TSTPAV
> 	Connection: Keep-Alive
> 	Content-length: 138
> 	Pragma: no-cache
> 	Content-type: application/marimba
> 	Request-type: update/12
> 
> what's being attempted here, and is anybody else seeing it?  
> sometimes it's
> 
> 	POST /PAV_REL HTTP/1.1
> 	Host: ...
> 	Connection: keep-alive
> 	User-Agent: TSTPAV
> 	Content-length: 974
> 	Pragma: no-cache
> 	Content-type: application/marimba
> 	Request-type: update/12
> 	Via: 1.0 proxy-rnb (NetCache NetApp/5.1D3)
> 	X-Forwarded-For: ...
> 
> i'm not currently collecting the content, maybe i should.  
> anybody seen this?

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBO3BKNEksS4VV8BvHEQL+bQCguE710TwNzGwUNw71A/ryszsvlQ0AoNr/
B2MwBqTb8Cp0/dLXxhp9hvlf
=jiJv
-----END PGP SIGNATURE-----