Today a servers access_log started filling with
These appear to be request timeout. It is acting like some kind of DoS.
The only thing that has been noticeably affected was Awstats. It doesn't know how to parse this line, and treats it as mangled. Awstats has a parameter that controls how many mangled lines it will skip before aborting.
In this case, I set
XXX.XXX.XXX.XXX - - [27/Sep/2013:04:15:11 +0000] "-" 408 0 "-" "-"
These appear to be request timeout. It is acting like some kind of DoS.
The only thing that has been noticeably affected was Awstats. It doesn't know how to parse this line, and treats it as mangled. Awstats has a parameter that controls how many mangled lines it will skip before aborting.
In this case, I set
NbOfLinesForCorruptedLog to 1000 (after 100 was not sufficient for it to find a valid record). This allowed the regular cron'ed job to continue.
Archives



