>> Checked on RH, Suse and Cygwin, all running the GNU version
>> of xargs. On which platforms does it work?
>
> Works for me on FreeBSD and OS X and would work with -i on RH8.0's GNU
> version of xargs.
You're right, I missed that. After replacing "-I xx" with "-ixx" the
script works fine.
However, the module seems to write three log entries (two before and
one after) for requests with redirects, ie "GET /". I've attached a
small patch that fixes the issue for me.
BTW, I don't know if it makes any difference but I'm testing
mod_log_forensic from an Apache 1.3.29 source tree.
--
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]
--- mod_log_forensic.c.orig Tue Jan 13 22:22:00 2004
+++ mod_log_forensic.c Tue Jan 13 22:22:19 2004
@@ -221,6 +221,8 @@
if (cfg->fd < 0)
return DECLINED;
+
+ if (r->prev != NULL) return DECLINED;
if (!(id = ap_table_get(r->subprocess_env, "UNIQUE_ID"))) {
/* we make the assumption that we can't go through all the PIDs in
