httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dan Poirier <poir...@pobox.com>
Subject Logging or not logging 408's
Date Mon, 28 Sep 2009 15:22:12 GMT
Apache 1.3 logged a 408 in the access log if a connection was received
but no request was received before the timeout.

Apache 2.x does not.  If a partial request is received, a 400 is logged,
but if nothing is received, it silently closes the connection when it
times out.

Logging of 408's might be useful to notice if someone is making
malicious requestless connections to attack the server, and identifying
the IP address of the client.  

Is there some good reason not to log the 408's in this case?

(This is also mentioned in PR39785,
https://issues.apache.org/bugzilla/show_bug.cgi?id=39785)

Thanks,

-- 
Dan Poirier <poirier@pobox.com>

Mime
View raw message