re; [Xitami] Access Log entry question
Robert M. Muench
xitami@lists.xitami.org
Sun, 24 Nov 2002 19:50:00 +0100
> -----Original Message-----
> From: xitami-admin@lists.xitami.org
> [mailto:xitami-admin@lists.xitami.org] On Behalf Of Go Bonkers
> Sent: Sunday, November 24, 2002 2:56 PM
> To: xitami@lists.xitami.org
> Subject: re; [Xitami] Access Log entry question
> darn worms cause that -1 here ;
Hi, so an faulty request will leave an entry in the access-log?
> if i fake paths to match one log file entry...
> 4.64.214.56 - - [24/Nov/2002:06:54:33 -0500] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 0 "" ""
>
> with worm thingies; http:/127.0.0.1/c/winnt/system32/cmd.exe?/c+dir
>
> log file then shows;
> 127.0.0.1 - - [24/Nov/2002:08:45:37 -0500] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 0 "" ""
> 127.0.0.1 - - [24/Nov/2002:08:45:37 -0500] "GET
> /c/winnt/system32/cmd.exe/
> HTTP/1.0" 200 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98;
> Q312461)"
> ~~~~~~~~~~~~~~~~~~~~
Well, but my log file doesn't show up the worm stuff. It's a normal
access to an existing HTML file. Still I'm having this -1 there...
Robert