Received: (qmail 16299 invoked by uid 2012); 6 May 1998 07:36:58 -0000 Message-Id: <19980506073658.16298.qmail@hyperreal.org> Date: 6 May 1998 07:36:58 -0000 From: Len Padilla Reply-To: Len@Padilla.Net To: apbugs@hyperreal.org Subject: Incomplete reansfer log X-Send-Pr-Version: 3.2 >Number: 2190 >Category: mod_log-any >Synopsis: Incomplete reansfer log >Confidential: no >Severity: non-critical >Priority: medium >Responsible: apache >State: closed >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Wed May 6 00:40:02 PDT 1998 >Last-Modified: Wed Jun 10 01:03:32 PDT 1998 >Originator: Len@Padilla.Net >Organization: >Release: 1.3b6 >Environment: Linux pc2 2.0.33 #12 Mon May 4 12:37:06 CEST 1998 i586 unknown gcc 2.7.2, Apache 1.3b6 (w/PHP-RC4) >Description: Some transfer log entries contain only the first byte (3 digits) of the client ip address. 194 - - [06/May/1998:09:28:31 +0200] "GET /index.html HTTP/1.0" 200 1215 >How-To-Repeat: >Fix: >Audit-Trail: From: Marc Slemko To: Len Padilla Cc: apbugs@hyperreal.org Subject: Re: mod_log-any/2190: Incomplete reansfer log Date: Wed, 6 May 1998 09:40:35 -0600 (MDT) On 6 May 1998, Len Padilla wrote: > > >Number: 2190 > >Category: mod_log-any > >Synopsis: Incomplete reansfer log > >Confidential: no > >Severity: non-critical > >Priority: medium > >Responsible: apache > >State: open > >Class: sw-bug > >Submitter-Id: apache > >Arrival-Date: Wed May 6 00:40:02 PDT 1998 > >Last-Modified: > >Originator: Len@Padilla.Net > >Organization: > apache > >Release: 1.3b6 > >Environment: > Linux pc2 2.0.33 #12 Mon May 4 12:37:06 CEST 1998 i586 unknown > gcc 2.7.2, Apache 1.3b6 (w/PHP-RC4) > >Description: > Some transfer log entries contain only the first byte (3 digits) of the > client ip address. > > 194 - - [06/May/1998:09:28:31 +0200] "GET /index.html HTTP/1.0" 200 1215 How often does this happen? Do you have HostnameLookups enabled? If so, are you sure this isn't just that the reverse DNS for the address in question is bogusly configured to return a hostname of "194"? Are they always the same address or do they differ? From: Marc Slemko To: Apache bugs database Cc: Subject: Re: mod_log-any/2190: Incomplete reansfer log (fwd) Date: Wed, 6 May 1998 23:40:04 -0600 (MDT) ---------- Forwarded message ---------- Date: Wed, 06 May 1998 23:13:11 +0200 From: Len Padilla To: Marc Slemko Subject: Re: mod_log-any/2190: Incomplete reansfer log Marc Slemko wrote: > > On 6 May 1998, Len Padilla wrote: > > > > > >Number: 2190 > > >Category: mod_log-any > > >Synopsis: Incomplete reansfer log > > >Confidential: no > > >Severity: non-critical > > >Priority: medium > > >Responsible: apache > > >State: open > > >Class: sw-bug > > >Submitter-Id: apache > > >Arrival-Date: Wed May 6 00:40:02 PDT 1998 > > >Last-Modified: > > >Originator: Len@Padilla.Net > > >Organization: > > apache > > >Release: 1.3b6 > > >Environment: > > Linux pc2 2.0.33 #12 Mon May 4 12:37:06 CEST 1998 i586 unknown > > gcc 2.7.2, Apache 1.3b6 (w/PHP-RC4) > > >Description: > > Some transfer log entries contain only the first byte (3 digits) of the > > client ip address. > > > > 194 - - [06/May/1998:09:28:31 +0200] "GET /index.html HTTP/1.0" 200 1215 > > How often does this happen? > > Do you have HostnameLookups enabled? If so, are you sure this isn't just > that the reverse DNS for the address in question is bogusly configured to > return a hostname of "194"? > > Are they always the same address or do they differ? Marc, I have HostnameLookups off. This behavior appears with accesses from many hosts. From the same browsing session, some are complete (e.g. 194.123.123.123) and some are truncted (e.g. 194). Today, 3800 out of 25000 were truncated. I'm running apache 1.3b6 with PHP3RC4, mod_auth_mysql, mod_log_mysql and other standard modules. Thanks for Apache, Len -- Len Padilla Len@Padilla.Net WWW.Padilla.Net State-Changed-From-To: open-closed State-Changed-By: dgaudet State-Changed-When: Wed Jun 10 01:03:32 PDT 1998 State-Changed-Why: Please visit http://bugs.apache.org/index/full/2366, there is a patch in that page which should fix this problem. Or you can pick up a snapshot of 1.3.1-dev at ftp://dev.apache.org/httpd/from-cvs/, it includes the bugfix. If you don't want to use the entire snapshot, you can just use the src/modules/standard/mod_usertrack.c file which has the bugfix. I'm gonna close this 'cause that should solve the problem... if it doesn't we'll reopen. Dean >Unformatted: [In order for any reply to be added to the PR database, ] [you need to include in the Cc line ] [and leave the subject line UNCHANGED. This is not done] [automatically because of the potential for mail loops. ]