Apache 1.3 logged a 408 in the access log if a connection was received but no request was received before the timeout.
Apache 2.x does not. If a partial request is received, a 400 is logged, but if nothing is received, it silently closes the connection when it times out. Logging of 408's might be useful to notice if someone is making malicious requestless connections to attack the server, and identifying the IP address of the client. Is there some good reason not to log the 408's in this case? (This is also mentioned in PR39785, https://issues.apache.org/bugzilla/show_bug.cgi?id=39785) Thanks, -- Dan Poirier <poir...@pobox.com>