# unmatched\_HTTP\_reply in weird.log **URL:** \ **Category:** Zeek\ **Created:** [July 24, 2014, 6:51pm UTC](https://community.zeek.org/t/unmatched-http-reply-in-weird-log/3198 "2014-07-24T18:51:05Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Gary\_Faulkner1](https://avatars.discourse-cdn.com/v4/letter/g/aeb1de/32.png) [@Gary\_Faulkner1](https://community.zeek.org/u/Gary_Faulkner1)\ **Post date:** [July 24, 2014, 6:51pm UTC](https://community.zeek.org/t/unmatched-http-reply-in-weird-log/3198/1 "2014-07-24T18:51:05Z")
Hello, Recently my Bro cluster started producing a lot of unmatched\_HTTP\_reply messages in weird.log and seemed to also stop logging outbound GET requests in http.log. I did some testing by following both Bro logs as I browsed to various websites and it looks like every time I visit a new site, the initial GET request doesn't get logged and a weird is generated. As such I'm wondering if this may be an indication that Bro is only seeing half the conversation? I can trace the change in logging behavior to a specific day, but I can't find any indication that there were any changes locally that would have stopped Bro from seeing any particular traffic. Anyone thoughts? Am I interpreting the logs correctly? Regards, Gary ---
**Author:** ![Azoff\_Justin](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@Azoff\_Justin](https://community.zeek.org/u/Azoff_Justin)\ **Post date:** [July 24, 2014, 7:09pm UTC](https://community.zeek.org/t/unmatched-http-reply-in-weird-log/3198/2 "2014-07-24T19:09:17Z")
Most likely this is a problem upstream from Bro. To rule out bro as a problem here do something like     tcpdump -nn -i eth1 host your.ip.address and port 80 if you only see one side of the conversion in tcpdump as well that will rule bro out as the problem. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:41pm UTC](https://community.zeek.org/t/unmatched-http-reply-in-weird-log/3198/3 "2022-05-06T15:41:56Z")