httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 7266] New: - Log Files Corrupt: Strange ASCII Chars
Date Wed, 20 Mar 2002 07:57:40 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7266>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7266

Log Files Corrupt: Strange ASCII Chars

           Summary: Log Files Corrupt: Strange ASCII Chars
           Product: Apache httpd-1.3
           Version: 1.3.23
          Platform: PC
        OS/Version: Windows NT/2K
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: All
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: borkman@buffalo.edu
                CC: borkman@buffalo.edu


I am running Apache HTTP server 1.3.23 on my Windows 2000 machine.
I did not compile it myself. I am using Apache's binaries.
Lately I have been noticing what seems to be corruptions in the log file
The first few hundred entries are fine. Then suddenly there are strange
ASCII chars. At times I've even seen fragments of the HTML code of some of
my own webpages appearing in the log file. At other places I see what looks
like compiled machine code with symbolic names and some string data.
For example, here's a few legible snipets of text in my log files:

uint16  Units  Percent  MappingStrings
uint32  Units  Minutes  MappingStrings
uint32  Units  Millivolts  Override  Range1InputVoltageHigh  Range1Input
Win32API|Printing and Print Spooler Structures|PRINTER_INFO_2|pDriverName
SMBIOS|Type 4|Processor Information|Status  CurrentVoltage
SMBIOS|Type 4|Processor Information|Socket Designation  Version
C I M _ D i s c r e t e S e n s o r
int32  Override  NominalReading  Units  Milliamps  MappingStrings
Win32Registry|SYSTEM\CurrentControlSet\Services\Tcpip\Parameters|NameServer 
MappingStrings
DomainDNSRegistrationEnabled  boolean

That last string appears in c:\WINNT\system32\wbem\Repository\CIM.REP
Other strings are definitely from my own HTML files.
I see the HTML code before it's processed by PHP.

At other places there's no readable text. Just the same strange ASCII
string repeated over and over.
It's really strange. The same corruptions 
appear in all 3 log files that I am generating. I have the usual access.log
and error.log files. I also have a custom log file called request.log.
The .conf line for this log file is:
CustomLog logs\request.log "%h|%s|%{%Y|%m|%d|%H|%M|%S}t|%l|%u|%T|%b|%{Host}i|%
{User-Agent}i|{Accept-Language}i|%{Referer}i|||%U"

The strange ASCII characters are the same in all 3 files, but they can
be most easily seen in the error.log file.

I can tell that the strange ASCII chars aren't part of a malicious request
because of where the chars start. They start at the beginning of a line
instead of where the raw request data would go.
The log files are rather big so I'd like to
email them to whoever gets assigned to this case. Plus pasting in strange ASCII
chars in Bugzilla could have some side-effects. And oh yeah, I'm not running
MS IIS, just in case you were wondering. I get a lot of worm probes looking
for IIS and they show up in my log files too. Scandisk didn't find any hard
drive problems. The hard drive is brand new. It looks to me like Apache is
reading bytes from random locations in memory and is writing the data back to
the log files. But it's the same messed up chars at every file. Maybe a
stream operator isn't working right. 

Is it possible that this is caused by a
another program running at the same time? I am also running DNS2GO by
Deerfield http://dns2go.deerfield.com/ and a DirectPlay video game server.
The game is Hardwar and I am using version 2.04 - which is the latest version. 
It was programmed by the people at http://www.softwarerefinery.com/
and it was published by Interplay.

Thanks,
Steven Borkman
borkman@buffalo.edu
http://borkman.mygamesite.net/

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message