[SWLUG] httpd return codes question
bascule
asura at theexcession.co.uk
Fri Mar 18 20:09:35 UTC 2005
in my httpd-perl logs i have the following:
< 84.97.245.202 - - [16/Mar/2005:03:21:21 +0000] "GET
http://ns43.hosteur.com/~arkdata/cgbdm.txt HTTP/1.1" 302 235 "-" "Mozilla/4.0
(compatible; MSIE 5.5; Windows NT 5.0"
< 84.97.245.202 - - [16/Mar/2005:03:21:31 +0000] "CONNECT ns43.hosteur.com:443
HTTP/1.1" 302 217 "-" "Jakarta Commons-HttpClient/3.0-beta1"
also
< 62.252.192.17 - - [16/Mar/2005:14:01:24 +0000]
"POST /_vti_bin/_vti_aut/fp30reg.dll HTTP/1.1" 302 242 "-" "-"
according to http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html
a '302' means, well i'm not sure what it means, 3xx are redirection codes with
302 meaning that the request can be found elsewhere - apparently -
i don't get how any request for ns43.hosteur.com can possibly get anything
else than a 404 - not found here return, since ns43.hosteur.com is nothing to
do with me, never heard of them, ditto for the second CONNECT item,
thirdly the last item makes no sense to me either, as i understand it another
machine tried to POST the file /_vti_bin/_vti_aut/fp30reg.dll to my machine,
perhaps to go under my web server root? why is the response not a polite
f-off to the originator? or, should the response be a f-off and i'm
misconfigured somehow?
if some one could translate these items into colloquial english i'd be
grateful, googling returns a squizillion log entries like the above or the
w3.org pages, which kind of make sense until i see items like the ones above
bascule
--
"Attack pattern alpha-omega-atari...go!" - Blossom
More information about the Swlug
mailing list