Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Desynchronized logging |
|
| Author |
|
Qmpeltaty
Joined: 06 Feb 2008
Posts: 182
Location: Poland
|
 Posted: Fri 05 Nov '10 14:14 Post subject: Desynchronized logging |
 |
|
Hello
I have found some weird entries registered in log files :
| Code: |
[04/Nov/2010:20:46:01 +0100] 94.145.92.115 TLSv1 AES256-SHA
[04/Nov/2010:20:46:01 +0100] 62.44.134.29 TLSv1 AES128-SHA
[04/Nov/2010:20:46:01 +0100] 94.145.92.115 TLSv1 AES256-SHA
[04/Nov/2010:20:46:01 +0100] 188.177.0.192 TLSv1 AES128-SHA
[04/Nov/2010:20:46:01 +0100] 94.191.179.28 TLSv1 AES128-SHA
[04/Nov/2010:20:46:01 +0100] 80.161.186.218 TLSv1 AES128-SHA
[04/Nov/2010:20:46:02 +0100] 94.145.92.115 TLSv1 AES256-SHA
[04/Nov/2010:20:46:02 +0100] 94.173.213.29 SSLv3 AES128-SHA
[04/Nov/2010:20:46:02 +0100] 188.177.0.192 TLSv1 AES128-SHA
[04/Nov/2010:20:46:02 +0100] 188.177.0.192 TLSv1 AES128-SHA
[04/Nov/2010:20:46:02 +0100] 194.239.103.42 TLSv1 AES128-SHA
[04/Nov/2010:20:46:01 +0100] 188.177.0.192 TLSv1 AES128-SHA <-----
[04/Nov/2010:20:45:53 +0100] 62.199.0.149 SSLv3 RC4-SHA <-----
[04/Nov/2010:20:46:02 +0100] 94.145.92.115 TLSv1 AES256-SHA
[04/Nov/2010:20:46:02 +0100] 94.145.92.115 TLSv1 AES256-SHA
[04/Nov/2010:20:45:46 +0100] 86.52.87.63 TLSv1 AES256-SHA <-----
[04/Nov/2010:20:46:02 +0100] 94.42.66.74 TLSv1 RC4-MD5
[04/Nov/2010:20:45:53 +0100] 188.182.238.144 TLSv1 RC4-MD5 <-----
[04/Nov/2010:20:46:02 +0100] 94.42.66.74 TLSv1 RC4-MD5
[04/Nov/2010:20:46:02 +0100] 80.161.186.218 TLSv1 AES128-SHA
[04/Nov/2010:20:46:02 +0100] 87.60.180.190 TLSv1 AES128-SHA
[04/Nov/2010:20:46:02 +0100] 87.60.180.190 TLSv1 AES128-SHA
[04/Nov/2010:20:46:02 +0100] 87.60.180.190 TLSv1 AES128-SHA
[04/Nov/2010:20:46:02 +0100] 87.60.180.190 TLSv1 AES128-SHA
|
Apache config responsible for this log :
| Code: |
CustomLog "|bin/rotatelogs d:/apache_log/ssl_log/request/ssl_request.log 5M" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
|
Apache/2.2.14 (Win32) mod_jk/1.2.25 mod_ssl/2.2.14 OpenSSL/0.9.8l PHP/5.2.1
What is the reason of those delayed entries ? Does it mean that request has been handled so long ? |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Fri 05 Nov '10 20:13 Post subject: |
|
|
Nope the requests didn't take any longer. Only the IP from the client are shorter than the others  |
|
| Back to top |
|
Qmpeltaty
Joined: 06 Feb 2008
Posts: 182
Location: Poland
|
| Posted: Mon 08 Nov '10 9:15 Post subject: |
|
|
| James Blond wrote: | | Nope the requests didn't take any longer. Only the IP from the client are shorter than the others |
 WHAT ????????????
Check it once again please :
| Code: |
[04/Nov/2010:20:46:02 +0100] 94.42.66.74 TLSv1 RC4-MD5
[04/Nov/2010:20:45:53 +0100] 188.182.238.144 TLSv1 RC4-MD5 <-----
[04/Nov/2010:20:46:02 +0100] 94.42.66.74 TLSv1 RC4-MD5
|
First entry is from 20:46:02 and next one 20:45:53. Looks like request from 20:45:53 has been logged later than request noticed at 20:46:02. This is unusual in my opinion. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Mon 08 Nov '10 14:49 Post subject: |
|
|
Whoops. I've overseen that. You should have written that you are worried about that request is in a false order. Sorry I got that wrong.
I haven't seen this before. |
|
| Back to top |
|
|
|
|
|
|
