You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Angelo Miranda <am...@reitoria.uminho.pt> on 2007/11/08 15:50:28 UTC

[users@httpd] Problem in access_log?

Hi everyone,

 

I am getting multiple lines in access_log for the same request. Most of the
time several in the same second or in the near seconds. Sometimes it can
take 1 hour or so.

This is happening for several IP's, in several days, in several pages.

Something must be happening with my access_log.

Someone can help me ?

I send an example below.

My server:

Server Version: Apache/2.0.55 (Unix) mod_ssl/2.0.55 OpenSSL/0.9.7a
mod_jk/1.2.15 

We are connecting Apache to Tomcat with mod_jk.

 

Thanks in advance

Angelo Miranda

 

200.241.244.4 - - [07/Nov/2007:15:04:58 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 24552
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:23 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:25 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:30 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:32 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:32 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:34 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:32 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 24552
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:54 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:14 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 24552
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:53 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:05:56 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:06:03 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:06:21 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:06:22 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:06:18 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:06:25 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 24552
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:06:40 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:07:06 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:07:05 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:07:07 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:07:14 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:07:15 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

200.241.244.4 - - [07/Nov/2007:15:07:17 -0500] "GET
/bitstream/1822/2999/1/TESE.pdf HTTP/1.0" 400 16368
"http://www.google.com.br/search?hl=pt-BR&q=palavras+que+terminam+em+az+ez+i
z+oz+uz&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"




RE: [users@httpd] Problem in access_log?

Posted by Angelo Miranda <am...@reitoria.uminho.pt>.
Hi,

I still couldnt solve this problem.
I have Apache+Tomcat connected with mod_jk.
I get too many continuous http status errors 400 for the same URL.
I saw the mod_jk.log, and i tis showing a error indeed. I even saw the
source code.
I am getting:
[info] ajp_process_callback::jk_ajp_common.c (1384): Connection aborted or
network problems
and
info] ajp_service::jk_ajp_common.c (1731): Receiving from tomcat failed,
because of client error without recovery in send loop 0
Line 1731 process a JK_HTTP_BAD_REQUEST error.

I saw somewhere this could be client closing the browser before getting the
whole file ? I cant see what is happening.
Just to exclude the Range request question.
How can i configure httpd.conf to do what you say ? Have some example ?

Thank you
Angelo Miranda



-----Original Message-----
From: jslive@gmail.com [mailto:jslive@gmail.com] On Behalf Of Joshua Slive
Sent: quinta-feira, 8 de Novembro de 2007 19:16
To: users@httpd.apache.org
Subject: Re: [users@httpd] Problem in access_log?

On Nov 8, 2007 10:08 AM, Angelo Miranda <am...@reitoria.uminho.pt> wrote:
> Hi,
>
> Thank you for your answer.
> I didnt notice the 400 code.
> For instance in this day (2007/11/7) the error_log is clean. No errors.
> Do you think the problem might be on Tomcat ? Some hint ?

Yes, if you don't see anything in the apache error log, it is most
likely tomcat generating the 400s. Check your tomcat config and logs.

If the problem is indeed caused by range requests, you might be able
to work around it with
Header set Accept-Ranges none
RequestHeader unset Range
in httpd.conf.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Problem in access_log?

Posted by Joshua Slive <jo...@slive.ca>.
On Nov 8, 2007 10:08 AM, Angelo Miranda <am...@reitoria.uminho.pt> wrote:
> Hi,
>
> Thank you for your answer.
> I didnt notice the 400 code.
> For instance in this day (2007/11/7) the error_log is clean. No errors.
> Do you think the problem might be on Tomcat ? Some hint ?

Yes, if you don't see anything in the apache error log, it is most
likely tomcat generating the 400s. Check your tomcat config and logs.

If the problem is indeed caused by range requests, you might be able
to work around it with
Header set Accept-Ranges none
RequestHeader unset Range
in httpd.conf.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


RE: [users@httpd] Problem in access_log?

Posted by Angelo Miranda <am...@reitoria.uminho.pt>.
Hi,

Thank you for your answer.
I didnt notice the 400 code.
For instance in this day (2007/11/7) the error_log is clean. No errors.
Do you think the problem might be on Tomcat ? Some hint ?

Thanks
Angelo

-----Original Message-----
From: jslive@gmail.com [mailto:jslive@gmail.com] On Behalf Of Joshua Slive
Sent: quinta-feira, 8 de Novembro de 2007 14:54
To: users@httpd.apache.org
Subject: Re: [users@httpd] Problem in access_log?

On Nov 8, 2007 9:50 AM, Angelo Miranda <am...@reitoria.uminho.pt> wrote:
>
> I am getting multiple lines in access_log for the same request. Most of
the
> time several in the same second or in the near seconds. Sometimes it can
> take 1 hour or so.

Since these are pdf files, it is most likely acrobat doing "byte
range" requests (requesting a portion of the file instead of the whole
file).

The real question you want to answer is whey the response status code
is 400. This error might be leading acrobat to retry. Is there
anything relevant in the error log?

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Problem in access_log?

Posted by Joshua Slive <jo...@slive.ca>.
On Nov 8, 2007 9:50 AM, Angelo Miranda <am...@reitoria.uminho.pt> wrote:
>
> I am getting multiple lines in access_log for the same request. Most of the
> time several in the same second or in the near seconds. Sometimes it can
> take 1 hour or so.

Since these are pdf files, it is most likely acrobat doing "byte
range" requests (requesting a portion of the file instead of the whole
file).

The real question you want to answer is whey the response status code
is 400. This error might be leading acrobat to retry. Is there
anything relevant in the error log?

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org