You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Michelle Konzack <li...@tamay-dogan.net> on 2008/09/05 02:45:52 UTC
[users@httpd] Weird log message
Hello,
This is the first time I have found the message in the
----[ '/home_www/.Vallendor/logs/access.log' ]--------------------------
[2008-09-05 02:35:32 +0200] ::1 [www.cybercenter.tamay-dogan.net] - - "GET / HTTP/1.0" 200 197 "-" "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
[2008-09-05 02:35:33 +0200] ::1 [www.cybercenter.tamay-dogan.net] - - "GET / HTTP/1.0" 200 197 "-" "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
[2008-09-05 02:35:50 +0200] ::1 [www.cybercenter.tamay-dogan.net] - - "GET / HTTP/1.0" 200 197 "-" "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
------------------------------------------------------------------------
The question is: What is a "internal dummy connection"?
And of course, my Server is NOT configured vor IPv6. Also I have no
VHost named <www.cybercenter.tamay-dogan.net>. In the DNS yes, but it
is not installed...
Thanks, Greetings and nice Day/Evening
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
Re: [users@httpd] Weird log message
Posted by Davide Bianchi <da...@onlyforfun.net>.
Marcin 'Rambo' Roguski wrote:
> Seriously though, while it's not an enormous load, dummy connections start
> creeping out after several weeks- I was shocked that, when I had to enable
> logging for local requests a few hours, these messages were about 90% of
> the log.
This is why you usually don't log requests from the local machine and
from well-known addresses (like your own home adress).
Davide
--
Gentlemen, Chicolini here may look like an idiot, and talk like
an idiot, but don't let that fool you. He really /is/ an idiot.
-- Julius Henry "Groucho" Marx (http://en.wikiquote.org/wiki/Groucho_Marx)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
[users@httpd] Re: Re: Weird log message
Posted by Michelle Konzack <li...@tamay-dogan.net>.
Hello Davide,
Am 2008-10-08 14:46:10, schrieb Davide Bianchi:
> You can use conditional logging for that, I do it all the time to avoid
> my own poking to spoil the statistics.
>
> In a pinch:
>
> SetEnvIf Remote_Addr "192\.168\." dontlog
> CustomLog /where/you/want/your/logfile combined env=!dontlog
>
> See the documentation about conditional logging.
I have found this in the meanwhile in another posting here...
Note: I have gotten no messages since 2008-09-26 and not
they went comeing as batch... Do not know why.
Thanks, Greetings and nice Day/Evening
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
Re: [users@httpd] Re: Weird log message
Posted by Davide Bianchi <da...@onlyforfun.net>.
André Warnier wrote:
> Michelle Konzack wrote:
>>
>> Does someone know, HOW to stop logging from local IPs like <192.168.*>?
You can use conditional logging for that, I do it all the time to avoid
my own poking to spoil the statistics.
In a pinch:
SetEnvIf Remote_Addr "192\.168\." dontlog
CustomLog /where/you/want/your/logfile combined env=!dontlog
See the documentation about conditional logging.
Davide
--
Today's most popular operating system is Microsoft Windows, which
runs multiple applications, networks computers, fetches files off the
hard drive, juggles RAM, and brings everything crashing down with
frightening regularity. - found on the Intranet at a PC company
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Re: Weird log message
Posted by André Warnier <aw...@ice-sa.com>.
Michelle Konzack wrote:
>
> Does someone know, HOW to stop logging from local IPs like <192.168.*>?
>
Turn off your laptop ? pull out its network cable ? kill the bot ?
;-)
More seriously, I'll go ask on another list and I'll get back here if I
find something.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
[users@httpd] Re: Weird log message
Posted by Michelle Konzack <li...@tamay-dogan.net>.
Am 2008-09-24 15:25:50, schrieb Marcin 'Rambo' Roguski:
> >> How to stop that? And not stop as ignore, but stop as have the server
> >> not
> >> do that (running 2.2.3 for the moment)?
>
> > Stop google from indexing your site?
> > http://www.robotstxt.org/faq/prevent.html
>
> LOL, funny :D
> Seriously though, while it's not an enormous load, dummy connections start
> creeping out after several weeks- I was shocked that, when I had to enable
> logging for local requests a few hours, these messages were about 90% of
> the log.
Only 90%?
I have the problem, that 98% of my hits coming from <192.168.0.112>
which is my Laptop :-) Google, even indexed the WHOLE website including
pics, videos and other stuff, hit maybe 0.7% and the the rest goes
public...
Does someone know, HOW to stop logging from local IPs like <192.168.*>?
Thanks, Greetings and nice Day/Evening
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
Re: [users@httpd] Weird log message
Posted by Marcin 'Rambo' Roguski <ra...@id.uw.edu.pl>.
>> How to stop that? And not stop as ignore, but stop as have the server
>> not
>> do that (running 2.2.3 for the moment)?
> Stop google from indexing your site?
> http://www.robotstxt.org/faq/prevent.html
LOL, funny :D
Seriously though, while it's not an enormous load, dummy connections start
creeping out after several weeks- I was shocked that, when I had to enable
logging for local requests a few hours, these messages were about 90% of
the log.
--
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Weird log message
Posted by Tom Evans <te...@googlemail.com>.
On Wed, 2008-09-24 at 13:55 +0200, Marcin 'Rambo' Roguski wrote:
> > Close, but no cigar. This is a multi-process apache waking up one of its
> > children.
> >
> > http://wiki.apache.org/httpd/InternalDummyConnection
>
> OK, a variation to the question: I'm getting that annoying
>
> williams - - [24/Sep/2008:14:46:03 +0200] "GET //gfx/arrow.gif HTTP/1.0"
> 200 62 "-"
> williams - - [24/Sep/2008:14:46:03 +0200] "GET //gfx/arrow.gif HTTP/1.0"
> 200 62 "-"
> crawl-66-249-71-16.googlebot.com - - [24/Sep/2008:14:46:03 +0200] "GET
> /?img=38&path=/Places/Warszawa/Okecie/Aircraft/Boeing%20737-300 HTTP/1.1"
> 200 4832 "-"
>
> How to stop that? And not stop as ignore, but stop as have the server not
> do that (running 2.2.3 for the moment)?
>
Stop google from indexing your site?
http://www.robotstxt.org/faq/prevent.html
Cheers
Tom
Re: [users@httpd] Weird log message
Posted by Marcin 'Rambo' Roguski <ra...@id.uw.edu.pl>.
> Close, but no cigar. This is a multi-process apache waking up one of its
> children.
>
> http://wiki.apache.org/httpd/InternalDummyConnection
OK, a variation to the question: I'm getting that annoying
williams - - [24/Sep/2008:14:46:03 +0200] "GET //gfx/arrow.gif HTTP/1.0"
200 62 "-"
williams - - [24/Sep/2008:14:46:03 +0200] "GET //gfx/arrow.gif HTTP/1.0"
200 62 "-"
crawl-66-249-71-16.googlebot.com - - [24/Sep/2008:14:46:03 +0200] "GET
/?img=38&path=/Places/Warszawa/Okecie/Aircraft/Boeing%20737-300 HTTP/1.1"
200 4832 "-"
How to stop that? And not stop as ignore, but stop as have the server not
do that (running 2.2.3 for the moment)?
--
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Weird log message
Posted by Tom Evans <te...@googlemail.com>.
On Mon, 2008-09-22 at 20:49 +0200, Krist van Besien wrote:
> On Fri, Sep 5, 2008 at 2:45 AM, Michelle Konzack
> <li...@tamay-dogan.net> wrote:
> > Hello,
> >
> > This is the first time I have found the message in the
> >
> > ----[ '/home_www/.Vallendor/logs/access.log' ]--------------------------
> > [2008-09-05 02:35:32 +0200] ::1 [www.cybercenter.tamay-dogan.net] - - "GET / HTTP/1.0" 200 197 "-" "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
> > [2008-09-05 02:35:33 +0200] ::1 [www.cybercenter.tamay-dogan.net] - - "GET / HTTP/1.0" 200 197 "-" "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
> > [2008-09-05 02:35:50 +0200] ::1 [www.cybercenter.tamay-dogan.net] - - "GET / HTTP/1.0" 200 197 "-" "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
>
>
> "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
> is just the useragent string used by whatever http client made this
> request. A useragent string can contain anything the client's
> programmer fancies.
> This is probably some process on your server that is watching your
> apache server, and that was installed by default.
>
> Krist
Close, but no cigar. This is a multi-process apache waking up one of its
children.
http://wiki.apache.org/httpd/InternalDummyConnection
Re: [users@httpd] Weird log message
Posted by Krist van Besien <kr...@gmail.com>.
On Fri, Sep 5, 2008 at 2:45 AM, Michelle Konzack
<li...@tamay-dogan.net> wrote:
> Hello,
>
> This is the first time I have found the message in the
>
> ----[ '/home_www/.Vallendor/logs/access.log' ]--------------------------
> [2008-09-05 02:35:32 +0200] ::1 [www.cybercenter.tamay-dogan.net] - - "GET / HTTP/1.0" 200 197 "-" "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
> [2008-09-05 02:35:33 +0200] ::1 [www.cybercenter.tamay-dogan.net] - - "GET / HTTP/1.0" 200 197 "-" "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
> [2008-09-05 02:35:50 +0200] ::1 [www.cybercenter.tamay-dogan.net] - - "GET / HTTP/1.0" 200 197 "-" "Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
"Apache/2.2.3 (Debian) PHP/5.2.0-8+etch10 (internal dummy connection)"
is just the useragent string used by whatever http client made this
request. A useragent string can contain anything the client's
programmer fancies.
This is probably some process on your server that is watching your
apache server, and that was installed by default.
Krist
--
krist.vanbesien@gmail.com
krist@vanbesien.org
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org