# Invalid control character in URL? **URL:** \ **Category:** Beats\ **Tags:** packetbeat\ **Created:** [March 10, 2020, 4:52pm UTC](https://discuss.elastic.co/t/invalid-control-character-in-url/222981 "2020-03-10T16:52:15Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![NogNeetMachinaal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nogneetmachinaal/32/58893_2.png) [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\ **Post date:** [March 10, 2020, 4:52pm UTC](https://discuss.elastic.co/t/invalid-control-character-in-url/222981/1 "2020-03-10T16:52:15Z")
See also below: I have found lots of errors in the syslog. They are all coming from PacketBeats. But I have no clue what this means; let alone what to do with it. Any suggestions? Thanks - Will ```auto Mar 10 17:30:11 tank packetbeat[2138]: POST /_bulk: net/url: invalid control character in URL Mar 10 17:30:11 tank packetbeat[2138]: 2020-03-10T17:30:11.874+0100#011WARN#011http/http.go:533#011Fail to parse HTTP parameters: parse LTS (Bionic Beaver)","family":"debian","name$ Mar 10 17:30:11 tank packetbeat[2138]: {"create":{"_index":"packetbeat-7.6.1","pipeline":"geoip-info"}} Mar 10 17:30:11 tank packetbeat[2138]: {"@timestamp":"2020-03-10T16:30:10.244Z","tags":["your-friend-the-network","packet-data"],"destination":{"port":9200,"packets":2,"bytes":132,$ Mar 10 17:30:11 tank packetbeat[2138]: POST /_bulk: net/url: invalid control character in URL Mar 10 17:30:12 tank packetbeat[2138]: 2020-03-10T17:30:12.408+0100#011WARN#011http/http.go:533#011Fail to parse HTTP parameters: parse {"create":{"_index":"packetbeat-7.6.1","pipe$ Mar 10 17:30:12 tank packetbeat[2138]: {"@timestamp":"2020-03-10T16:30:10.244Z","flow":{"final":false,"id":"EQwA////DP//////FBgBAAEADCl9tXYADsTQXoXAqIubwKiL7/AjBN5GRAAAAAAAAA"},"ta$ Mar 10 17:30:12 tank packetbeat[2138]: POST /_bulk: net/url: invalid control character in URL Mar 10 17:30:12 tank packetbeat[2138]: 2020-03-10T17:30:12.816+0100#011WARN#011http/http.go:533#011Fail to parse HTTP parameters: parse {"create":{"_index":"packetbeat-7.6.1","pipe$ Mar 10 17:30:12 tank packetbeat[2138]: {"@timestamp":"2020-03-10T16:30:10.244Z","flow":{"final":false,"id":"EQwA////DP//////FBgBAAEADsTQXoWwf7mKyhnAqIvvH7rzfl6suwE6RgAAAAAAAA"},"ne$ Mar 10 17:30:12 tank packetbeat[2138]: POST /_bulk: net/url: invalid control character in URL Mar 10 17:30:13 tank packetbeat[2138]: 2020-03-10T17:30:13.498+0100#011WARN#011http/http.go:533#011Fail to parse HTTP parameters: parse LTS (Bionic Beaver)","family":"debian","name$ Mar 10 17:30:13 tank packetbeat[2138]: {"create":{"_index":"packetbeat-7.6.1","pipeline":"geoip-info"}} Mar 10 17:30:13 tank packetbeat[2138]: {"@timestamp":"2020-03-10T16:30:10.244Z","destination":{"packets":76,"mac":"00:0c:29:7d:b5:76","ip":"192.168.139.155","port":9200,"bytes":899$ Mar 10 17:30:13 tank packetbeat[2138]: POST /_bulk: net/url: invalid control character in URL ``` ---
**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\ **Post date:** [March 11, 2020, 8:22am UTC](https://discuss.elastic.co/t/invalid-control-character-in-url/222981/2 "2020-03-11T08:22:53Z")
Do you have any idea what kind of URL might it be? I expect some weird character like /r ... ---
**Author:** ![NogNeetMachinaal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nogneetmachinaal/32/58893_2.png) [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\ **Post date:** [March 11, 2020, 10:24pm UTC](https://discuss.elastic.co/t/invalid-control-character-in-url/222981/3 "2020-03-11T22:24:41Z")
No - don't know. Also don't know where to look for this =\> suggestions? ---
**Author:** ![josheph](https://avatars.discourse-cdn.com/v4/letter/j/3d9bf3/32.png) [@josheph](https://discuss.elastic.co/u/josheph)\ **Post date:** [March 12, 2020, 4:32am UTC](https://discuss.elastic.co/t/invalid-control-character-in-url/222981/4 "2020-03-12T04:32:10Z")
ot the same problem … it was working before, now I cloned it onto a new Workstation and it refused to launch Windows 10, Chrome 72.0.3626.121 (64Bit) [official site](https://www.prepaidcardstatus.mobi/) , go version go1.12 windows/amd64 ---
**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\ **Post date:** [March 12, 2020, 8:00am UTC](https://discuss.elastic.co/t/invalid-control-character-in-url/222981/5 "2020-03-12T08:00:46Z")
I assume you can record some network traffic and look for patterns. You will find patterns in packetbeat logs. ---
**Author:** ![NogNeetMachinaal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nogneetmachinaal/32/58893_2.png) [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\ **Post date:** [March 13, 2020, 7:26pm UTC](https://discuss.elastic.co/t/invalid-control-character-in-url/222981/6 "2020-03-13T19:26:40Z")
Yes - could do that. However, my main concern is the amount of entries in the log saying {"create":{"\_index":"packetbeat-7.6.1","pipeline":"geoip-info"}. Why creating this many new indices? Does this mean that something is missing within ES? If yes - what? I have done packetbeat setup =\> wouldn't expect this. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 10, 2020, 7:26pm UTC](https://discuss.elastic.co/t/invalid-control-character-in-url/222981/7 "2020-04-10T19:26:48Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.