Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 87239 invoked from network); 29 Jan 2011 11:45:34 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 29 Jan 2011 11:45:34 -0000 Received: (qmail 10649 invoked by uid 500); 29 Jan 2011 11:45:32 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 10556 invoked by uid 500); 29 Jan 2011 11:45:29 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 10548 invoked by uid 99); 29 Jan 2011 11:45:28 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 29 Jan 2011 11:45:28 +0000 X-ASF-Spam-Status: No, hits=2.2 required=5.0 tests=HTML_MESSAGE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy) Received: from [83.160.57.126] (HELO mail.adaptr.nl) (83.160.57.126) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 29 Jan 2011 11:45:22 +0000 Received: from Slackintosh.local (unknown [10.10.10.209]) by mail.adaptr.nl (Postfix) with ESMTPSA id 8F7461D804C for ; Sat, 29 Jan 2011 12:45:01 +0100 (CET) Message-ID: <4D43FDBD.8090002@adaptr.nl> Date: Sat, 29 Jan 2011 12:45:01 +0100 From: Jeroen Geilman User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7 MIME-Version: 1.0 To: users@httpd.apache.org References: <311696.13118.qm@web36705.mail.mud.yahoo.com> In-Reply-To: <311696.13118.qm@web36705.mail.mud.yahoo.com> Content-Type: multipart/alternative; boundary="------------000800000600060306070404" Subject: Re: [users@httpd] problem with extra numbers after %h hostname/ip address in access_log --------------000800000600060306070404 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 1/28/11 5:25 PM, Randy Tejas wrote: > Hello, > > I'm seeing a problem in my logs where there are extra numbers at the > end of an ip address: > > 10.56.194.252194.252 > 10.56.195.63.195.63 > > Apache seems to be duplicating the last two octects. Anybody seen this > before and how to fix? > > Server version: Apache/2.0.63 > Server built: Oct 24 2010 13:42:01 > > LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" > \"%{User-Agent}i\"" combined > > This is where it began (Jan 10): > 10.79.24.178 - - [09/Dec/2010:20:40:20 -0600] "GET /everest/ HTTP/1.1" > 200 98011 > 10.56.194.252194.252 - - [10/Jan/2011:16:57:37 -0600] "GET > /images/search/ac_collectio > n_12x15.png HTTP/1.1" 404 316 > 10.56.194.252194.252 - - [10/Jan/2011:16:57:37 -0600] "GET > /images/search/ac_pub_15x15 > .png HTTP/1.1" 404 309 > > Thanks! > If you look at the above log, it only happens on 404s. Are you redirecting ErrorDocuments somewhere ? -- J. --------------000800000600060306070404 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit On 1/28/11 5:25 PM, Randy Tejas wrote:

Hello,

I'm seeing a problem in my logs where there are extra numbers at the end of an ip address:

10.56.194.252194.252
10.56.195.63.195.63

Apache seems to be duplicating the last two octects. Anybody seen this before and how to fix?

Server version: Apache/2.0.63
Server built: Oct 24 2010 13:42:01

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

This is where it began (Jan 10):
10.79.24.178 - - [09/Dec/2010:20:40:20 -0600] "GET /everest/ HTTP/1.1" 200 98011
10.56.194.252194.252 - - [10/Jan/2011:16:57:37 -0600] "GET /images/search/ac_collectio
n_12x15.png HTTP/1.1" 404 316
10.56.194.252194.252 - - [10/Jan/2011:16:57:37 -0600] "GET /images/search/ac_pub_15x15
.png HTTP/1.1" 404 309

Thanks!

If you look at the above log, it only happens on 404s.
Are you redirecting ErrorDocuments somewhere ?

-- 
J.

--------------000800000600060306070404--