List Info

Thread: DO NOT REPLY New: - Invalid (network) source IP's are logged.




DO NOT REPLY New: - Invalid (network) source IP's are logged.
country flaguser name
United States
2007-10-21 11:26:16
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=43
667>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43667

           Summary: Invalid (network) source IP's are
logged.
           Product: Apache httpd-2
           Version: 2.0.52
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: P2
         Component: Core
        AssignedTo: bugshttpd.apache.org
        ReportedBy: andrewganudc.net


We are running CentOS 4.5 (2.6.9-55.0.2.ELsmp /
httpd-2.0.52-32.2.ent.centos4) using a somewhat 
complicated network stack (see ifconfig below). 2 NIC's are
using tg3 driver which are bonded using the 
bonding driver, the 8021q driver is also providing a tagged
interface on the bonded interface.. 
Everything functions normally however all requests from any
source IP always get logged in apache 
using the same address which always ends in zero.. examples
(130.65.159.0, 130.113.73.0). This 
address is persistant until apache is restarted then a
different address is chosen. We have 6 servers 
setup this way all with different applications / workload
all displaying the same symptom. I have tired 
using Listen parameter both with interface IP and
0.0.0.0:443 without success. Netstat and naturally 
tcpdump both show correct source IP for the requests. 

How does apache derive what goes into %h logging parameter?
LMK if I can provide further information.

Log example:
130.65.159.0 - - [21/Oct/2007:09:10:56 -0700] "GET /
HTTP/1.1" 200 2760 "-"
"Java/1.6.0"
130.65.159.0 - - [21/Oct/2007:09:10:56 -0700] "GET /
HTTP/1.1" 200 2760 "-"
"Java/1.6.0"
130.65.159.0 - - [21/Oct/2007:09:10:56 -0700] "GET /
HTTP/1.1" 200 2760 "-"
"Java/1.6.0"
130.65.159.0 - - [21/Oct/2007:09:11:08 -0700] "GET /
HTTP/1.1" 200 2760 "-"
"Java/1.5.0_11"

#netstat -tanp | grep 443 | grep ESTA
tcp        0      0 208.158.1.253:443          
216.152.173.43:4459         ESTABLISHED 29916/httpd        

tcp        0      0 208.158.1.253:443          
216.152.173.43:4476         ESTABLISHED 29922/httpd       

#ifconfig -a
bond0     Link encap:Ethernet  HWaddr 00:1A:A0:16:6F:C9  
          inet addr:192.168.255.68  Bcast:192.168.255.255 
Mask:255.255.255.0
          UP BROADCAST RUNNING MASTER MULTICAST  MTU:1500 
Metric:1
          RX packets:434124526 errors:0 dropped:0 overruns:0
frame:0
          TX packets:462568842 errors:0 dropped:0 overruns:0
carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:685862759 (654.0 MiB)  TX
bytes:3689179262 (3.4 GiB)

bond0.158 Link encap:Ethernet  HWaddr 00:1A:A0:16:6F:C9  
          inet addr:208.158.1.253  Bcast:208.158.1.255 
Mask:255.255.255.0
          UP BROADCAST RUNNING MASTER MULTICAST  MTU:1500 
Metric:1
          RX packets:429076385 errors:0 dropped:0 overruns:0
frame:0
          TX packets:457738459 errors:0 dropped:0 overruns:0
carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:3390328017 (3.1 GiB)  TX bytes:3640731689
(3.3 GiB)

eth0      Link encap:Ethernet  HWaddr 00:1A:A0:16:6F:C9  
          UP BROADCAST RUNNING SLAVE MULTICAST  MTU:1500 
Metric:1
          RX packets:412901942 errors:0 dropped:0 overruns:0
frame:0
          TX packets:462568725 errors:0 dropped:0 overruns:0
carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:927142678 (884.1 MiB)  TX
bytes:3689171774 (3.4 GiB)
          Interrupt:185 

eth1      Link encap:Ethernet  HWaddr 00:1A:A0:16:6F:C9  
          UP BROADCAST RUNNING SLAVE MULTICAST  MTU:1500 
Metric:1
          RX packets:21222584 errors:0 dropped:0 overruns:0
frame:0
          TX packets:117 errors:0 dropped:0 overruns:0
carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:4053687377 (3.7 GiB)  TX bytes:7488 (7.3
KiB)
          Interrupt:193 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:119465388 errors:0 dropped:0 overruns:0
frame:0
          TX packets:119465388 errors:0 dropped:0 overruns:0
carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:613059774 (584.6 MiB)  TX bytes:613059774
(584.6 MiB)

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=ema
il
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the
assignee.

------------------------------------------------------------
---------
To unsubscribe, e-mail: bugs-unsubscribehttpd.apache.org
For additional commands, e-mail: bugs-helphttpd.apache.org


[1]

about | contact  Other archives ( Real Estate discussion Medical topics )