You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jørn <ap...@dahl-stamnes.net> on 2011/01/14 09:31:50 UTC
[users@httpd] Log entries
Hello,
This may be a bit off-topic but...
During the last months I have noticed this kind of entries in the apache log
file:
84.48.198.105 - - [09/Jan/2011:12:41:24 +0100]
"GET /dahls/Vin/url(res://C:/Programfiler/Google/Google%20Toolbar/Component/GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/
findy_buttons.png) HTTP/1.1" 404 333
217.144.240.150 - - [14/Jan/2011:09:24:39 +0100]
"GET /dahls/Nofaq/Trening/url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADgAAAAOCAYAAAB6pd%2buAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A%2fwD%2foL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oGAhENK17O5ogAAAAZdEVYdENvbW1lbnQAQ3JlYXRlZCB3aXRoIEdJTVBXgQ4XAAAD6UlEQVRIx82WXWxTdRjGf6fndO3adbZ0VLoP9gFMXZQFNgSWDEkEYtSQkNVg4o2JH9NGJTMk6k01vTIhXshFzTCKE5NFORoXXDBs4nTMZHMzSETHDKyQyb7Xbu36dc7p8aaQZm5GNzd8rk7evOf%2fz%2fM%2bz%2f99X4E1htcn68v5742mffVRJd19uucqH539lSq3yKuHtlDmkPj99aPYe39kfRoMOqgCJHSdJNRL3AEE%2fB7h3xZFgO6JuRQdl6PE8zfRPzlF71CEojoXFc%2b9SPy3KxjCc%2bgCpIE0IilB65YWHFQBfAbUZEIDQGPA7xngDsNgMpFUY0Q0ESHHhKbkM3A9yoFqDceGQpTijWjhXxCAtC6gCWk0BAwLzqkAQsC6TJVDGcKrZdeDXp%2fcvki8zeuTH8uO6ehYzRJumxEUBUkyMa%2baUDWBVDLNnJJgNE9ixGZiOlckaQAVAWmBdTqBzqxQJ%2fD2KgrTCDzq9clywO%2fxZMi1AgcBBbhNPhyJ47TlsGuzjaHRSRRdoKq8AF3XOdvZw1BMQneUMl9iZN4eo3AmRWVwFulvqusAngBOryLBY0AcaPD65LeAFPAk0BLwe57OTnz3i4sc3ruFx2s24MwzoWgaW4tNnPn0JLt37KJ2zwGMgk5X3zd8ONJOX7mGvcK5OEGvT94HNGcs2rjSzrhUUwn4PV1AV4bcm5nwkYDfc3xhbs%2bVWQZH%2btlekc%2fDtRupKrub1uYT7NhWw9bde%2fl2REUSRR56pJT0lxofhM8xaheXVPA1oDPg9zT%2bExmsDqF8hUqmlvi%2bDUs6RWhW5Ov%2bKaxmK5XFLkIzIe7f%2fiBtwypPVZqIRWJ8Ny6x09OEJJs5rrTxn4yJY00NwRU0mtaMLY9kyL3n9clVAb%2fnley8wnyBkkIHrgILm925JGPTJONRDHqaHDQmx2a4Ph4hpFkpcZqZmBhHtbI4wYDfs3%2bNhn5bpqG03LKl1ydXAS97fXJ%2b9jv0Hq6lyK5C%2fBJ6PEjyj2nW2VQGLw5gLKqn92YSxWgjbrRy89ogVosFoyT%2bZUzcurjD65M71oDjCeDzbCIZ5VqAk9mJm9w5zAdPkRx%2bB3H6Y3Kj7TxQMkzLqfe5V71GvttFiduOa3aQc58E6JseJJXSEVhjeH2yvpxN5qVnygj%2fdJQCWxjBAOm0gVRC5MLPdoZnt2F3rsdisTAV7MBlusT3oVK6TOriCv4fIZnsSDlu1IQRNWVGV83kYKFuZzX7PQ1MFOg0j53nh%2bg8qpLg2eogeyJ53JFddDkLtyiZ6%2b%2b674Vu5cZXiIkJdAEMjnvIqzjEjVCS7rmrhOwC0Vwn58fqkIIXeL72Mn8CJn6UfKGeNt4AAAAASUVORK5CYII%3d)
HTTP/1.1" 404 1801
I wonder what is causing this? Seem to be some kind of badly configured
"google feature" on the client side, or?
--
Jørn Dahl-Stamnes
homepage: http://www.dahl-stamnes.net/dahls/
Re: [users@httpd] Log entries
Posted by Stormy <st...@stormy.ca>.
At 08:59 AM 1/16/2011 +0100, Jørn wrote:
>On Saturday 15 January 2011 23:06, Jeroen Geilman wrote:
> > On 1/14/11 9:31 AM, Jørn wrote:
> > > Hello,
> > >
> > > This may be a bit off-topic but...
> > >
> > > During the last months I have noticed this kind of entries in the apache
> > > log file:
> > >
> > > 84.48.198.105 - - [09/Jan/2011:12:41:24 +0100]
> > > "GET
> > > /dahls/Vin/url(res://C:/Programfiler/Google/Google%20Toolbar/Component/Go
> > >ogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/ findy_buttons.png)
> > > HTTP/1.1" 404 333
> > >
> > > 217.144.240.150 - - [14/Jan/2011:09:24:39 +0100]
> > > "GET
> > > /dahls/Nofaq/Trening/url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAD
> > >gAAAAOCAYAAAB6pd%2buAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A%2fwD%2foL2nkwAAAAlwSF
[snip
>I more interested in what at the client side is causing such requests.
I had a look into this a few weeks ago, and it appears to be IE8 related
and concerns the google.com search page with the live search results and
preview - although I never got to the bottom of exactly how the mechanism
is supposed to work and then fails. (somehow a mismatch between google
toolbar and MSIE8???)
I guessed at that time that google had invented some specific way of
getting webmasters to put some code into their pages so as to get
preferential "preview" treatment, e.g.:
<[defanged] html>
<head>
<title>rogers and browne url(res: C: Program Files Google Google Toolbar
Component GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll
findy_buttons.png)</title>
<meta name="keywords" content="rogers and browne url(res: C: Program Files
Google Google Toolbar Component
GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll findy_buttons.png)">
<meta name="description" content="rogers and browne url(res: C: Program
Files Google Google Toolbar Component
GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll findy_buttons.png)">
Best - Paul
tired old sys-admin
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Log entries
Posted by Jørn <ap...@dahl-stamnes.net>.
On Saturday 15 January 2011 23:06, Jeroen Geilman wrote:
> On 1/14/11 9:31 AM, Jørn wrote:
> > Hello,
> >
> > This may be a bit off-topic but...
> >
> > During the last months I have noticed this kind of entries in the apache
> > log file:
> >
> > 84.48.198.105 - - [09/Jan/2011:12:41:24 +0100]
> > "GET
> > /dahls/Vin/url(res://C:/Programfiler/Google/Google%20Toolbar/Component/Go
> >ogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/ findy_buttons.png)
> > HTTP/1.1" 404 333
> >
> > 217.144.240.150 - - [14/Jan/2011:09:24:39 +0100]
> > "GET
> > /dahls/Nofaq/Trening/url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAD
> >gAAAAOCAYAAAB6pd%2buAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A%2fwD%2foL2nkwAAAAlwSF
> >lzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oGAhENK17O5ogAAAAZdEVYdENvbW1lbnQAQ3JlYXRl
> >ZCB3aXRoIEdJTVBXgQ4XAAAD6UlEQVRIx82WXWxTdRjGf6fndO3adbZ0VLoP9gFMXZQFNgSWDE
> >kEYtSQkNVg4o2JH9NGJTMk6k01vTIhXshFzTCKE5NFORoXXDBs4nTMZHMzSETHDKyQyb7Xbu36
> >dc7p8aaQZm5GNzd8rk7evOf%2fz%2fM%2bz%2f99X4E1htcn68v5742mffVRJd19uucqH539lS
> >q3yKuHtlDmkPj99aPYe39kfRoMOqgCJHSdJNRL3AEE%2fB7h3xZFgO6JuRQdl6PE8zfRPzlF71
> >CEojoXFc%2b9SPy3KxjCc%2bgCpIE0IilB65YWHFQBfAbUZEIDQGPA7xngDsNgMpFUY0Q0ESHH
> >hKbkM3A9yoFqDceGQpTijWjhXxCAtC6gCWk0BAwLzqkAQsC6TJVDGcKrZdeDXp%2fcvki8zeuT
> >H8uO6ehYzRJumxEUBUkyMa%2baUDWBVDLNnJJgNE9ixGZiOlckaQAVAWmBdTqBzqxQJ%2fD2Kg
> >rTCDzq9clywO%2fxZMi1AgcBBbhNPhyJ47TlsGuzjaHRSRRdoKq8AF3XOdvZw1BMQneUMl9iZN
> >4eo3AmRWVwFulvqusAngBOryLBY0AcaPD65LeAFPAk0BLwe57OTnz3i4sc3ruFx2s24MwzoWga
> >W4tNnPn0JLt37KJ2zwGMgk5X3zd8ONJOX7mGvcK5OEGvT94HNGcs2rjSzrhUUwn4PV1AV4bcm5
> >nwkYDfc3xhbs%2bVWQZH%2btlekc%2fDtRupKrub1uYT7NhWw9bde%2fl2REUSRR56pJT0lxof
> >hM8xaheXVPA1oDPg9zT%2bExmsDqF8hUqmlvi%2bDUs6RWhW5Ov%2bKaxmK5XFLkIzIe7f%2fi
> >BtwypPVZqIRWJ8Ny6x09OEJJs5rrTxn4yJY00NwRU0mtaMLY9kyL3n9clVAb%2fnley8wnyBkk
> >IHrgILm925JGPTJONRDHqaHDQmx2a4Ph4hpFkpcZqZmBhHtbI4wYDfs3%2bNhn5bpqG03LKl1y
> >dXAS97fXJ%2b9jv0Hq6lyK5C%2fBJ6PEjyj2nW2VQGLw5gLKqn92YSxWgjbrRy89ogVosFoyT%
> >2bZUzcurjD65M71oDjCeDzbCIZ5VqAk9mJm9w5zAdPkRx%2bB3H6Y3Kj7TxQMkzLqfe5V71Gvt
> >tFiduOa3aQc58E6JseJJXSEVhjeH2yvpxN5qVnygj%2fdJQCWxjBAOm0gVRC5MLPdoZnt2F3rs
> >disTAV7MBlusT3oVK6TOriCv4fIZnsSDlu1IQRNWVGV83kYKFuZzX7PQ1MFOg0j53nh%2bg8qp
> >Lg2eogeyJ53JFddDkLtyiZ6%2b%2b674Vu5cZXiIkJdAEMjnvIqzjEjVCS7rmrhOwC0Vwn58fq
> >kIIXeL72Mn8CJn6UfKGeNt4AAAAASUVORK5CYII%3d) HTTP/1.1" 404 1801
> >
> > I wonder what is causing this?
>
> A client is requesting these URLs.
I know that :)
I more interested in what at the client side is causing such requests.
> > Seem to be some kind of badly configured
> > "google feature" on the client side, or?
>
> Yes, probably.
--
Jørn Dahl-Stamnes
homepage: http://www.dahl-stamnes.net/dahls/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Log entries
Posted by Jeroen Geilman <je...@adaptr.nl>.
On 1/14/11 9:31 AM, Jørn wrote:
> Hello,
>
> This may be a bit off-topic but...
>
> During the last months I have noticed this kind of entries in the apache log
> file:
>
> 84.48.198.105 - - [09/Jan/2011:12:41:24 +0100]
> "GET /dahls/Vin/url(res://C:/Programfiler/Google/Google%20Toolbar/Component/GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/
> findy_buttons.png) HTTP/1.1" 404 333
>
> 217.144.240.150 - - [14/Jan/2011:09:24:39 +0100]
> "GET /dahls/Nofaq/Trening/url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADgAAAAOCAYAAAB6pd%2buAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A%2fwD%2foL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oGAhENK17O5ogAAAAZdEVYdENvbW1lbnQAQ3JlYXRlZCB3aXRoIEdJTVBXgQ4XAAAD6UlEQVRIx82WXWxTdRjGf6fndO3adbZ0VLoP9gFMXZQFNgSWDEkEYtSQkNVg4o2JH9NGJTMk6k01vTIhXshFzTCKE5NFORoXXDBs4nTMZHMzSETHDKyQyb7Xbu36dc7p8aaQZm5GNzd8rk7evOf%2fz%2fM%2bz%2f99X4E1htcn68v5742mffVRJd19uucqH539lSq3yKuHtlDmkPj99aPYe39kfRoMOqgCJHSdJNRL3AEE%2fB7h3xZFgO6JuRQdl6PE8zfRPzlF71CEojoXFc%2b9SPy3KxjCc%2bgCpIE0IilB65YWHFQBfAbUZEIDQGPA7xngDsNgMpFUY0Q0ESHHhKbkM3A9yoFqDceGQpTijWjhXxCAtC6gCWk0BAwLzqkAQsC6TJVDGcKrZdeDXp%2fcvki8zeuTH8uO6ehYzRJumxEUBUkyMa%2baUDWBVDLNnJJgNE9ixGZiOlckaQAVAWmBdTqBzqxQJ%2fD2KgrTCDzq9clywO%2fxZMi1AgcBBbhNPhyJ47TlsGuzjaHRSRRdoKq8AF3XOdvZw1BMQneUMl9iZN4eo3AmRWVwFulvqusAngBOryLBY0AcaPD65LeAFPAk0BLwe57OTnz3i4sc3ruFx2s24MwzoWgaW4tNnPn0JLt37KJ2zwGMgk5X3zd8ONJOX7mGvcK5OEGvT94HNGcs2rjSzrhUUwn4PV1AV4bcm5nwkYDfc3xhbs%2bVWQZH%2btlekc%2fDtRupKrub1uYT7NhWw9bde%2fl2REUSRR56pJT0lxofhM8xaheXVPA1oDPg9zT%2bExmsDqF8hUqmlvi%2bDUs6RWhW5Ov%2bKaxmK5XFLkIzIe7f%2fiBtwypPVZqIRWJ8Ny6x09OEJJs5rrTxn4yJY00NwRU0mtaMLY9kyL3n9clVAb%2fnley8wnyBkkIHrgILm925JGPTJONRDHqaHDQmx2a4Ph4hpFkpcZqZmBhHtbI4wYDfs3%2bNhn5bpqG03LKl1ydXAS97fXJ%2b9jv0Hq6lyK5C%2fBJ6PEjyj2nW2VQGLw5gLKqn92YSxWgjbrRy89ogVosFoyT%2bZUzcurjD65M71oDjCeDzbCIZ5VqAk9mJm9w5zAdPkRx%2bB3H6Y3Kj7TxQMkzLqfe5V71GvttFiduOa3aQc58E6JseJJXSEVhjeH2yvpxN5qVnygj%2fdJQCWxjBAOm0gVRC5MLPdoZnt2F3rsdisTAV7MBlusT3oVK6TOriCv4fIZnsSDlu1IQRNWVGV83kYKFuZzX7PQ1MFOg0j53nh%2bg8qpLg2eogeyJ53JFddDkLtyiZ6%2b%2b674Vu5cZXiIkJdAEMjnvIqzjEjVCS7rmrhOwC0Vwn58fqkIIXeL72Mn8CJn6UfKGeNt4AAAAASUVORK5CYII%3d)
> HTTP/1.1" 404 1801
>
> I wonder what is causing this?
A client is requesting these URLs.
> Seem to be some kind of badly configured
> "google feature" on the client side, or?
>
Yes, probably.
--
J.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Log entries
Posted by Jørn <ap...@dahl-stamnes.net>.
On Monday 17 January 2011 16:24, Rich Bowen wrote:
> On Jan 14, 2011, at 3:31 AM, Jørn wrote:
> If you look at the data itself, you'll see that it's a png image. It
> looks to me as though you have a file upload form that is getting
> submitted by GET rather than POST. This may be a site problem, or it
> may be a browser bug. Either way, it doesn't appear to matter much,
> since it's resulting in a 404, and Apache is rejecting the request.
There is no upload form in the /dahls/Nofaq path.
I thing it it must be some kind of brower bug. And as you say, it doesn't
mather much. I'm just curious :)
--
Jørn Dahl-Stamnes
homepage: http://www.dahl-stamnes.net/dahls/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Log entries
Posted by Rich Bowen <rb...@rcbowen.com>.
On Jan 14, 2011, at 3:31 AM, Jørn wrote:
> Hello,
>
> This may be a bit off-topic but...
>
> During the last months I have noticed this kind of entries in the
> apache log
> file:
>
> 84.48.198.105 - - [09/Jan/2011:12:41:24 +0100]
> "GET /dahls/Vin/url(res://C:/Programfiler/Google/Google%20Toolbar/
> Component/GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/
> findy_buttons.png) HTTP/1.1" 404 333
>
> 217.144.240.150 - - [14/Jan/2011:09:24:39 +0100]
> "GET /dahls/Nofaq/Trening/url(data:image/
> png;base64,iVBORw0KGgoAAAANSUhEUgAAADgAAAAOCAYAAAB6pd
> %2buAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A%2fwD
> %2foL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oGAhENK17O5ogAAAAZdEV
> YdENvbW1lbnQAQ3JlYXRlZCB3aXRoIEdJTVBXgQ4XAAAD6UlEQVRIx82WXWxTdRjGf6fnd
> O3adbZ0VLoP9gFMXZQFNgSWDEkEYtSQkNVg4o2JH9NGJTMk6k01vTIhXshFzTCKE5NFORo
> XXDBs4nTMZHMzSETHDKyQyb7Xbu36dc7p8aaQZm5GNzd8rk7evOf%2fz%2fM%2bz
> %2f99X4E1htcn68v5742mffVRJd19uucqH539lSq3yKuHtlDmkPj99aPYe39kfRoMOqgCJ
> HSdJNRL3AEE%2fB7h3xZFgO6JuRQdl6PE8zfRPzlF71CEojoXFc%2b9SPy3KxjCc
> %2bgCpIE0IilB65YWHFQBfAbUZEIDQGPA7xngDsNgMpFUY0Q0ESHHhKbkM3A9yoFqDceGQ
> pTijWjhXxCAtC6gCWk0BAwLzqkAQsC6TJVDGcKrZdeDXp
> %2fcvki8zeuTH8uO6ehYzRJumxEUBUkyMa
> %2baUDWBVDLNnJJgNE9ixGZiOlckaQAVAWmBdTqBzqxQJ%2fD2KgrTCDzq9clywO
> %2fxZMi1AgcBBbhNPhyJ47TlsGuzjaHRSRRdoKq8AF3XOdvZw1BMQneUMl9iZN4eo3AmRWVwFulvqusAngBOryLBY0AcaPD65LeAFPAk0BLwe57OTnz3i4sc3ruFx2s24MwzoWgaW4tNnPn0JLt37KJ2zwGMgk5X3zd8ONJOX7mGvcK5OEGvT94HNGcs2rjSzrhUUwn4PV1AV4bcm5nwkYDfc3xhbs%2bVWQZH%2btlekc%2fDtRupKrub1uYT7NhWw9bde%2fl2REUSRR56pJT0lxofhM8xaheXVPA1oDPg9zT%2bExmsDqF8hUqmlvi%2bDUs6RWhW5Ov%2bKaxmK5XFLkIzIe7f%2fiBtwypPVZqIRWJ8Ny6x09OEJJs5rrTxn4yJY00NwRU0mtaMLY9kyL3n9clVAb%2fnley8wnyBkkIHrgILm925JGPTJONRDHqaHDQmx2a4Ph4hpFkpcZqZmBhHtbI4wYDfs3%2bNhn5bpqG03LKl1ydXAS97fXJ%2b9jv0Hq6lyK5C%2fBJ6PEjyj2nW2VQGLw5gLKqn92YSxWgjbrRy89ogVosFoyT%2bZUzcurjD65M71oDjCeDzbCIZ5VqAk9mJm9w5zAdPkRx%2bB3H6Y3Kj7TxQMkzLqfe5V71GvttFiduOa3aQc58E6JseJJXSEVhjeH2yvpxN5qVnygj%2fdJQCWxjBAOm0gVRC5MLPdoZnt2F3rsdisTAV7MBlusT3oVK6TOriCv4fIZnsSDlu1IQRNWVGV83kYKFuZzX7PQ1MFOg0j53nh%2bg8qpLg2eogeyJ53JFddDkLtyiZ6%2b%2b674Vu5cZXiIkJdAEMjnvIqzjEjVCS7rmrhOwC0Vwn58fqkIIXeL72Mn8CJn6UfKGeNt4AAAAASUVORK5CYII%3d)
> HTTP/1.1" 404 1801
>
> I wonder what is causing this? Seem to be some kind of badly
> configured
> "google feature" on the client side, or?
If you look at the data itself, you'll see that it's a png image. It
looks to me as though you have a file upload form that is getting
submitted by GET rather than POST. This may be a site problem, or it
may be a browser bug. Either way, it doesn't appear to matter much,
since it's resulting in a 404, and Apache is rejecting the request.
--
Rich Bowen
rbowen@rcbowen.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org