On Wed, Dec 19, 2001 at 11:38:55AM -0800, Ian Holsman wrote: > (attached a PCAP) > server is running apache 2.0.29 (+mod-include patch + apr-table > patch+multidbm stuff) > > we're seeing the following request come in on our test servers, > and it is causing us to segfault's every once and a while in the logger. > I was just wondering if anyone knew about this and if it is patched in > CVS Head. > I remember someone mentioning a fix to the error code a while back, but > I can't see anything in the changes file. > > to summarize: > a bad packet is sent > we don't send the HTTP headers > we attempt to log the packet, which causes a segfault in our custom logger > > I'm thinking stuff like this should just be rejected and not logged at > all in the access logs, (just in the error ones) > > BTW.. has anyone got a tool to replay a PCAP dump onto a live server?
Try tcptrace (tcptrace.org) or you can use something like ethereal/tethereal to piece back together the TCP stream. Then take netcat (`nc`) and feed the file back to whatever hostname/port that you want. -aaron
