Red Hat Bugzilla – Bug 134288
/etc/log.d/scripts/services/http fails on access_log entries with multiple spaces in request field
Last modified: 2007-11-30 17:10:50 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1)
Description of problem:
The logwatch report on the http service incorrectly includes some
valid request URL's (under the unidentified 'other' category) if those
log entries have multiple space characters in the quoted request field.
A total of 9 unidentified 'other' records logged
POST /~cddb/cddb.cgi HTTP/1.0 with response code(s) 200 200 200 200
(Note the two spaces after the POST keyword, which is exaclty how
these requests also appear in the access_log file.)
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Produce access_log entries with multiple consecutive spaces in
2. Run: logwatch --service http
3. Note incorrectly flagged request in report.
Actual Results: Report includes requests that should be considered
Expected Results: Such requests should not be included in the report.
Patch to follow.
Created attachment 104606 [details]
patch to allow multiple spaces in http request field