-
Apache Log Question
I found this in my logfile yesterday and was wondering if anyone can shed some light on it.
192.168.101.155 - - [31/Aug/2004:10:21:04 -0400] "&\x063(\xd1.d\b\xdaiU\xefT\xf5%zQ\xa3\x96\xcbTv\x97e\xf0y\x82t=\x1d\xddI\xfa\xa8.\xd2\xad\x8b\x0c\x8b\xe4\xf8\xb2\xda:I\x91\x1a" 400 -
It obviously came from someone on our LAN, but I'm not sure what it is ? The entry before and after this entry were normal, from the same machine, but this one was a little odd.
I know who the person was and she has no intention,knowledge, need, want etc. to do anything malicious, but this was just a little concerning.
Any ideas ?
Thanks,
Murph :confused:
-
Looks like some faulty client software sending a completely corrupt request.
Are you sure something wasn't trying to connect to the HTTP server using a completely different protocol?
Slarty
-
Agreed with slarty above...but I don't think it's a different protocol because you can connect to a web server in a number of ways, the two primary ways being telnet and a browser. Looks to be a corrupt packet or something, not sure. The 400 on the end results in apache sending the HTTP_BAD_REQUEST back to the client, so it didn't understand what was given to it and IMHO, responded accordingly.
-
It may be. She was testing one of our web apps that we have but this is the first time I have noticed it in the logs at all. She said she was getting some errors throughout the day, maybe this is something related.
Thanks again.