| 1 |
On Wed, 26 Sep 2007 18:51:31 -0700 |
| 2 |
Grant <emailgrant@×××××.com> wrote: |
| 3 |
|
| 4 |
> > > Does anyone else get entries like this in their apache2 |
| 5 |
> > > access_log: |
| 6 |
> > > |
| 7 |
> > > 127.0.0.1 - - [26/Sep/2007:03:10:08 -0700] "GET /" 400 470 |
| 8 |
> > > |
| 9 |
> > > I get a whole slew of them every day. They always show up in |
| 10 |
> > > batches and each entry in a batch is logged at almost the same |
| 11 |
> > > second. |
| 12 |
> > > |
| 13 |
> > |
| 14 |
> > Connection to/from localhost. Do you have some process running on |
| 15 |
> > the same server that's doing monitoring? The 400 reply is even more |
| 16 |
> > interesting. I think the request should be "GET / HTTP/1.1" or |
| 17 |
> > similar which is probably why it is returning a 400. |
| 18 |
> |
| 19 |
> I'm not doing any sort of monitoring like that. What is that "470"? |
| 20 |
> I noticed the log entries always include that, at least for the last |
| 21 |
> 10 days. |
| 22 |
> |
| 23 |
> - Grant |
| 24 |
|
| 25 |
|
| 26 |
To be sure, you have to check the fields defined in your log format |
| 27 |
variable in the configuration. The date and source IP address fields are |
| 28 |
obvious. The dashes mean "field is empty". My guess is that one of |
| 29 |
those is for http_user. 470 most probably is the http error code (means |
| 30 |
bad request) and the last field with value "470" would be "bytes sent". |
| 31 |
|
| 32 |
Again: I'm just guessing. If it was up to me, I'd check the config |
| 33 |
files out and do some googling to get the meaning of those fields and |
| 34 |
their values. |
| 35 |
|
| 36 |
|
| 37 |
-- |
| 38 |
Best regards, |
| 39 |
Daniel |
| 40 |
-- |
| 41 |
gentoo-user@g.o mailing list |
Archives