# \[WARN\] http.netty "Invalid version format " **URL:** \ **Category:** Elasticsearch\ **Created:** [November 16, 2015, 1:46am UTC](https://discuss.elastic.co/t/warn-http-netty-invalid-version-format/34632 "2015-11-16T01:46:07Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![no\_jihun](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/no_jihun/32/64028_2.png) [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\ **Post date:** [November 16, 2015, 1:46am UTC](https://discuss.elastic.co/t/warn-http-netty-invalid-version-format/34632/1 "2015-11-16T01:46:07Z")
There are so many warning message. about 7k message per a day. two message seems a set of error. > [2015-11-16 10:36:30,639][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x96e95426, /10.98.168.209:36733 =\> /10.98.168.207:9200] > java.lang.IllegalArgumentException: invalid version format: /STATS HTTP/1.1 > [2015-11-16 10:36:30,639][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x96e95426, /10.98.168.209:36733 :\> /10.98.168.207:9200] > java.lang.IllegalArgumentException: invalid version format: (X86\_64-REDHAT-LINUX-GNU) LIBCURL/7.19.7 NSS/3.13.1.0 ZLIB/1.2.3 LIBIDN/1.18 LIBSSH2/1.2.2 full error message > [2015-11-16 10:36:30,639][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x96e95426, /10.98.168.209:36733 =\> /10.98.168.207:9200] > java.lang.IllegalArgumentException: invalid version format: /STATS HTTP/1.1 > at org.elasticsearch.common.netty.handler.codec.http.HttpVersion.(HttpVersion.java:94) > at org.elasticsearch.common.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > at org.elasticsearch.common.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > at org.elasticsearch.common.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > at org.elasticsearch.common.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > at org.elasticsearch.common.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > at org.elasticsearch.common.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435) > at org.elasticsearch.common.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) > at org.elasticsearch.common.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > at org.elasticsearch.common.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) > at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:74) > at org.elasticsearch.common.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) > at org.elasticsearch.common.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) > at org.elasticsearch.common.netty.channel.Channels.fireMessageReceived(Channels.java:268) > at org.elasticsearch.common.netty.channel.Channels.fireMessageReceived(Channels.java:255) > at org.elasticsearch.common.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) > at org.elasticsearch.common.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) > at org.elasticsearch.common.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) > at java.lang.Thread.run(Thread.java:745) > [2015-11-16 10:36:30,639][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x96e95426, /10.98.168.209:36733 :\> /10.98.168.207:9200] > java.lang.IllegalArgumentException: invalid version format: (X86\_64-REDHAT-LINUX-GNU) LIBCURL/7.19.7 NSS/3.13.1.0 ZLIB/1.2.3 LIBIDN/1.18 LIBSSH2/1.2.2 > at org.elasticsearch.common.netty.handler.codec.http.HttpVersion.(HttpVersion.java:94) > at org.elasticsearch.common.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62) > at org.elasticsearch.common.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75) > at org.elasticsearch.common.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191) > at org.elasticsearch.common.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102) > at org.elasticsearch.common.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500) > at org.elasticsearch.common.netty.handler.codec.replay.ReplayingDecoder.cleanup(ReplayingDecoder.java:554) > at - all of nodes running with es 1.7.2 - java 1.8.0.45 - OS : centos release 6.3 final what about this message warning? and how can I fix? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [November 16, 2015, 3:29am UTC](https://discuss.elastic.co/t/warn-http-netty-invalid-version-format/34632/2 "2015-11-16T03:29:30Z")
Looks like something from `10.98.168.209` is connecting and passing in bad data. You'd have to check that host to see what. ---
**Author:** ![no\_jihun](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/no_jihun/32/64028_2.png) [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\ **Post date:** [November 16, 2015, 4:59am UTC](https://discuss.elastic.co/t/warn-http-netty-invalid-version-format/34632/3 "2015-11-16T04:59:05Z")
``` Looks like something from 10.98.168.209 is connecting and passing in bad data. You'd have to check that host to see what. ``` not only between 10.98.168.209:36733 =\> /10.98.168.207:9200 but also between every node make warning message. > $ cat DodolLauncherES.log | grep "closing connection" > [2015-11-16 00:00:30,067][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0xfb2bc0f0, /10.98.168.208:42966 =\> /10.98.168.207:9200] > [2015-11-16 00:00:30,069][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0xfb2bc0f0, /10.98.168.208:42966 :\> /10.98.168.207:9200] > [2015-11-16 00:00:30,181][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x0b8a1136, /10.98.168.210:35181 =\> /10.98.168.207:9200] > [2015-11-16 00:00:30,182][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x0b8a1136, /10.98.168.210:35181 :\> /10.98.168.207:9200] > [2015-11-16 00:00:30,408][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x2f804969, /10.98.168.207:57296 =\> /10.98.168.207:9200] > [2015-11-16 00:00:30,409][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x2f804969, /10.98.168.207:57296 :\> /10.98.168.207:9200] > [2015-11-16 00:00:30,564][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0xeb5acb97, /10.98.168.209:34009 =\> /10.98.168.207:9200] > [2015-11-16 00:00:30,565][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0xeb5acb97, /10.98.168.209:34009 :\> /10.98.168.207:9200] > [2015-11-16 00:00:30,596][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x9dd4227d, /10.98.168.211:56323 =\> /10.98.168.207:9200] > [2015-11-16 00:00:30,596][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x9dd4227d, /10.98.168.211:56323 :\> /10.98.168.207:9200] > [2015-11-16 00:01:30,061][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x7b54e6d1, /10.98.168.208:42970 =\> /10.98.168.207:9200] > [2015-11-16 00:01:30,062][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x7b54e6d1, /10.98.168.208:42970 :\> /10.98.168.207:9200] > [2015-11-16 00:01:30,181][WARN][http.netty] [xanalytics501] Caught exception while handling client http traffic, closing connection [id: 0x26983790, /10.98.168.210:35185 =\> /10.98.168.207:9200] ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [November 16, 2015, 9:48am UTC](https://discuss.elastic.co/t/warn-http-netty-invalid-version-format/34632/4 "2015-11-16T09:48:08Z")
Ok, so what else is on those hosts? Are you sending non-HTTP data to the HTTP port? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 11:38pm UTC](https://discuss.elastic.co/t/warn-http-netty-invalid-version-format/34632/5 "2017-07-05T23:38:15Z")