Bug 134288 - /etc/log.d/scripts/services/http fails on access_log entries with multiple spaces in request field
/etc/log.d/scripts/services/http fails on access_log entries with multiple sp...
Status: CLOSED RAWHIDE
Product: Fedora
Classification: Fedora
Component: logwatch (Show other bugs)
2
All Linux
medium Severity low
: ---
: ---
Assigned To: Jiri Ryska
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2004-09-30 18:34 EDT by Gilbert E. Detillieux
Modified: 2007-11-30 17:10 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2004-12-13 10:05:18 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
patch to allow multiple spaces in http request field (448 bytes, patch)
2004-09-30 18:37 EDT, Gilbert E. Detillieux
no flags Details | Diff

  None (edit)
Description Gilbert E. Detillieux 2004-09-30 18:34:47 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1)
Gecko/20030113

Description of problem:
The logwatch report on the http service incorrectly includes some
valid request URL's (under the unidentified 'other' category) if those
log entries have multiple space characters in the quoted request field.
For example:

A total of 9 unidentified 'other' records logged
  POST  /~cddb/cddb.cgi HTTP/1.0 with response code(s) 200 200 200 200
...

(Note the two spaces after the POST keyword, which is exaclty how
these requests also appear in the access_log file.)

Version-Release number of selected component (if applicable):
logwatch-5.1-3

How reproducible:
Always

Steps to Reproduce:
1. Produce access_log entries with multiple consecutive spaces in
request field.
2. Run: logwatch --service http
3. Note incorrectly flagged request in report.
    

Actual Results:  Report includes requests that should be considered
valid otherwise.

Expected Results:  Such requests should not be included in the report.

Additional info:

Patch to follow.
Comment 1 Gilbert E. Detillieux 2004-09-30 18:37:45 EDT
Created attachment 104606 [details]
patch to allow multiple spaces in http request field
Comment 2 Jiri Ryska 2004-11-09 08:42:51 EST
Applied

Note You need to log in before you can comment on or make changes to this bug.