re; [Xitami] Access Log entry question

[Go Bonkers]

~~~~~~~~~~~~~~
;re; Subject: [Xitami] Access Log entry question
;
;Hi, I'm using analog to analyze my log files. I get some warning and
;looking at the log I saw this:
;;;;;;;;;
200.181.80.220 - - [24/Nov/2002:01:12:58 +0100] "GET /tag. HTTP/1.1" 404
-1
"http://www.robertmuench.de/makedocpro.html"
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"

;;;;;;;;
darn worms cause that  -1 here ;
if i fake paths to match one log file entry...
4.64.214.56 - - [24/Nov/2002:06:54:33 -0500] "GET 
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 0 "" ""

with worm thingies;
http:/127.0.0.1/c/winnt/system32/cmd.exe?/c+dir

log file then shows;
127.0.0.1 - - [24/Nov/2002:08:45:37 -0500] "GET 
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 0 "" ""
127.0.0.1 - - [24/Nov/2002:08:45:37 -0500] "GET /c/winnt/system32/cmd.exe/ 
HTTP/1.0" 200 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; 
Q312461)"
~~~~~~~~~~~~~~~~~~~~




_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail