Re: [users@httpd] Log entries
On Jan 14, 2011, at 3:31 AM, Jørn wrote: Hello, This may be a bit off-topic but... During the last months I have noticed this kind of entries in the apache log file: 84.48.198.105 - - [09/Jan/2011:12:41:24 +0100] GET /dahls/Vin/url(res://C:/Programfiler/Google/Google%20Toolbar/ Component/GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/ findy_buttons.png) HTTP/1.1 404 333 217.144.240.150 - - [14/Jan/2011:09:24:39 +0100] GET /dahls/Nofaq/Trening/url(data:image/ png;base64,iVBORw0KGgoNSUhEUgAAADgOCAYAAAB6pd %2buAXNSR0IArs4c6QZiS0dEAP8A%2fwD %2foL2nkwlwSFlzAAALEwAACxMBAJqcGAd0SU1FB9oGAhENK17O5ogZdEV YdENvbW1lbnQAQ3JlYXRlZCB3aXRoIEdJTVBXgQ4XAAAD6UlEQVRIx82WXWxTdRjGf6fnd O3adbZ0VLoP9gFMXZQFNgSWDEkEYtSQkNVg4o2JH9NGJTMk6k01vTIhXshFzTCKE5NFORo XXDBs4nTMZHMzSETHDKyQyb7Xbu36dc7p8aaQZm5GNzd8rk7evOf%2fz%2fM%2bz %2f99X4E1htcn68v5742mffVRJd19uucqH539lSq3yKuHtlDmkPj99aPYe39kfRoMOqgCJ HSdJNRL3AEE%2fB7h3xZFgO6JuRQdl6PE8zfRPzlF71CEojoXFc%2b9SPy3KxjCc %2bgCpIE0IilB65YWHFQBfAbUZEIDQGPA7xngDsNgMpFUY0Q0ESHHhKbkM3A9yoFqDceGQ pTijWjhXxCAtC6gCWk0BAwLzqkAQsC6TJVDGcKrZdeDXp %2fcvki8zeuTH8uO6ehYzRJumxEUBUkyMa %2baUDWBVDLNnJJgNE9ixGZiOlckaQAVAWmBdTqBzqxQJ%2fD2KgrTCDzq9clywO %2fxZMi1AgcBBbhNPhyJ47TlsGuzjaHRSRRdoKq8AF3XOdvZw1BMQneUMl9iZN4eo3AmRWVwFulvqusAngBOryLBY0AcaPD65LeAFPAk0BLwe57OTnz3i4sc3ruFx2s24MwzoWgaW4tNnPn0JLt37KJ2zwGMgk5X3zd8ONJOX7mGvcK5OEGvT94HNGcs2rjSzrhUUwn4PV1AV4bcm5nwkYDfc3xhbs%2bVWQZH%2btlekc%2fDtRupKrub1uYT7NhWw9bde%2fl2REUSRR56pJT0lxofhM8xaheXVPA1oDPg9zT%2bExmsDqF8hUqmlvi%2bDUs6RWhW5Ov%2bKaxmK5XFLkIzIe7f%2fiBtwypPVZqIRWJ8Ny6x09OEJJs5rrTxn4yJY00NwRU0mtaMLY9kyL3n9clVAb%2fnley8wnyBkkIHrgILm925JGPTJONRDHqaHDQmx2a4Ph4hpFkpcZqZmBhHtbI4wYDfs3%2bNhn5bpqG03LKl1ydXAS97fXJ%2b9jv0Hq6lyK5C%2fBJ6PEjyj2nW2VQGLw5gLKqn92YSxWgjbrRy89ogVosFoyT%2bZUzcurjD65M71oDjCeDzbCIZ5VqAk9mJm9w5zAdPkRx%2bB3H6Y3Kj7TxQMkzLqfe5V71GvttFiduOa3aQc58E6JseJJXSEVhjeH2yvpxN5qVnygj%2fdJQCWxjBAOm0gVRC5MLPdoZnt2F3rsdisTAV7MBlusT3oVK6TOriCv4fIZnsSDlu1IQRNWVGV83kYKFuZzX7PQ1MFOg0j53nh%2bg8qpLg2eogeyJ53JFddDkLtyiZ6%2b%2b674Vu5cZXiIkJdAEMjnvIqzjEjVCS7rmrhOwC0Vwn58fqkIIXeL72Mn8CJn6UfKGeNt4ASUVORK5CYII%3d) HTTP/1.1 404 1801 I wonder what is causing this? Seem to be some kind of badly configured google feature on the client side, or? If you look at the data itself, you'll see that it's a png image. It looks to me as though you have a file upload form that is getting submitted by GET rather than POST. This may be a site problem, or it may be a browser bug. Either way, it doesn't appear to matter much, since it's resulting in a 404, and Apache is rejecting the request. -- Rich Bowen rbo...@rcbowen.com - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [users@httpd] Log entries
On Monday 17 January 2011 16:24, Rich Bowen wrote: On Jan 14, 2011, at 3:31 AM, Jørn wrote: If you look at the data itself, you'll see that it's a png image. It looks to me as though you have a file upload form that is getting submitted by GET rather than POST. This may be a site problem, or it may be a browser bug. Either way, it doesn't appear to matter much, since it's resulting in a 404, and Apache is rejecting the request. There is no upload form in the /dahls/Nofaq path. I thing it it must be some kind of brower bug. And as you say, it doesn't mather much. I'm just curious :) -- Jørn Dahl-Stamnes homepage: http://www.dahl-stamnes.net/dahls/ - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [users@httpd] Log entries
On Saturday 15 January 2011 23:06, Jeroen Geilman wrote: On 1/14/11 9:31 AM, Jørn wrote: Hello, This may be a bit off-topic but... During the last months I have noticed this kind of entries in the apache log file: 84.48.198.105 - - [09/Jan/2011:12:41:24 +0100] GET /dahls/Vin/url(res://C:/Programfiler/Google/Google%20Toolbar/Component/Go ogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/ findy_buttons.png) HTTP/1.1 404 333 217.144.240.150 - - [14/Jan/2011:09:24:39 +0100] GET /dahls/Nofaq/Trening/url(data:image/png;base64,iVBORw0KGgoNSUhEUgAAAD gOCAYAAAB6pd%2buAXNSR0IArs4c6QZiS0dEAP8A%2fwD%2foL2nkwlwSF lzAAALEwAACxMBAJqcGAd0SU1FB9oGAhENK17O5ogZdEVYdENvbW1lbnQAQ3JlYXRl ZCB3aXRoIEdJTVBXgQ4XAAAD6UlEQVRIx82WXWxTdRjGf6fndO3adbZ0VLoP9gFMXZQFNgSWDE kEYtSQkNVg4o2JH9NGJTMk6k01vTIhXshFzTCKE5NFORoXXDBs4nTMZHMzSETHDKyQyb7Xbu36 dc7p8aaQZm5GNzd8rk7evOf%2fz%2fM%2bz%2f99X4E1htcn68v5742mffVRJd19uucqH539lS q3yKuHtlDmkPj99aPYe39kfRoMOqgCJHSdJNRL3AEE%2fB7h3xZFgO6JuRQdl6PE8zfRPzlF71 CEojoXFc%2b9SPy3KxjCc%2bgCpIE0IilB65YWHFQBfAbUZEIDQGPA7xngDsNgMpFUY0Q0ESHH hKbkM3A9yoFqDceGQpTijWjhXxCAtC6gCWk0BAwLzqkAQsC6TJVDGcKrZdeDXp%2fcvki8zeuT H8uO6ehYzRJumxEUBUkyMa%2baUDWBVDLNnJJgNE9ixGZiOlckaQAVAWmBdTqBzqxQJ%2fD2Kg rTCDzq9clywO%2fxZMi1AgcBBbhNPhyJ47TlsGuzjaHRSRRdoKq8AF3XOdvZw1BMQneUMl9iZN 4eo3AmRWVwFulvqusAngBOryLBY0AcaPD65LeAFPAk0BLwe57OTnz3i4sc3ruFx2s24MwzoWga W4tNnPn0JLt37KJ2zwGMgk5X3zd8ONJOX7mGvcK5OEGvT94HNGcs2rjSzrhUUwn4PV1AV4bcm5 nwkYDfc3xhbs%2bVWQZH%2btlekc%2fDtRupKrub1uYT7NhWw9bde%2fl2REUSRR56pJT0lxof hM8xaheXVPA1oDPg9zT%2bExmsDqF8hUqmlvi%2bDUs6RWhW5Ov%2bKaxmK5XFLkIzIe7f%2fi BtwypPVZqIRWJ8Ny6x09OEJJs5rrTxn4yJY00NwRU0mtaMLY9kyL3n9clVAb%2fnley8wnyBkk IHrgILm925JGPTJONRDHqaHDQmx2a4Ph4hpFkpcZqZmBhHtbI4wYDfs3%2bNhn5bpqG03LKl1y dXAS97fXJ%2b9jv0Hq6lyK5C%2fBJ6PEjyj2nW2VQGLw5gLKqn92YSxWgjbrRy89ogVosFoyT% 2bZUzcurjD65M71oDjCeDzbCIZ5VqAk9mJm9w5zAdPkRx%2bB3H6Y3Kj7TxQMkzLqfe5V71Gvt tFiduOa3aQc58E6JseJJXSEVhjeH2yvpxN5qVnygj%2fdJQCWxjBAOm0gVRC5MLPdoZnt2F3rs disTAV7MBlusT3oVK6TOriCv4fIZnsSDlu1IQRNWVGV83kYKFuZzX7PQ1MFOg0j53nh%2bg8qp Lg2eogeyJ53JFddDkLtyiZ6%2b%2b674Vu5cZXiIkJdAEMjnvIqzjEjVCS7rmrhOwC0Vwn58fq kIIXeL72Mn8CJn6UfKGeNt4ASUVORK5CYII%3d) HTTP/1.1 404 1801 I wonder what is causing this? A client is requesting these URLs. I know that :) I more interested in what at the client side is causing such requests. Seem to be some kind of badly configured google feature on the client side, or? Yes, probably. -- Jørn Dahl-Stamnes homepage: http://www.dahl-stamnes.net/dahls/ - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [users@httpd] Log entries
At 08:59 AM 1/16/2011 +0100, Jørn wrote: On Saturday 15 January 2011 23:06, Jeroen Geilman wrote: On 1/14/11 9:31 AM, Jørn wrote: Hello, This may be a bit off-topic but... During the last months I have noticed this kind of entries in the apache log file: 84.48.198.105 - - [09/Jan/2011:12:41:24 +0100] GET /dahls/Vin/url(res://C:/Programfiler/Google/Google%20Toolbar/Component/Go ogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/ findy_buttons.png) HTTP/1.1 404 333 217.144.240.150 - - [14/Jan/2011:09:24:39 +0100] GET /dahls/Nofaq/Trening/url(data:image/png;base64,iVBORw0KGgoNSUhEUgAAAD gOCAYAAAB6pd%2buAXNSR0IArs4c6QZiS0dEAP8A%2fwD%2foL2nkwlwSF [snip I more interested in what at the client side is causing such requests. I had a look into this a few weeks ago, and it appears to be IE8 related and concerns the google.com search page with the live search results and preview - although I never got to the bottom of exactly how the mechanism is supposed to work and then fails. (somehow a mismatch between google toolbar and MSIE8???) I guessed at that time that google had invented some specific way of getting webmasters to put some code into their pages so as to get preferential preview treatment, e.g.: [defanged] html head titlerogers and browne url(res: C: Program Files Google Google Toolbar Component GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll findy_buttons.png)/title meta name=keywords content=rogers and browne url(res: C: Program Files Google Google Toolbar Component GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll findy_buttons.png) meta name=description content=rogers and browne url(res: C: Program Files Google Google Toolbar Component GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll findy_buttons.png) Best - Paul tired old sys-admin - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [users@httpd] Log entries
On 1/14/11 9:31 AM, Jørn wrote: Hello, This may be a bit off-topic but... During the last months I have noticed this kind of entries in the apache log file: 84.48.198.105 - - [09/Jan/2011:12:41:24 +0100] GET /dahls/Vin/url(res://C:/Programfiler/Google/Google%20Toolbar/Component/GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/ findy_buttons.png) HTTP/1.1 404 333 217.144.240.150 - - [14/Jan/2011:09:24:39 +0100] GET /dahls/Nofaq/Trening/url(data:image/png;base64,iVBORw0KGgoNSUhEUgAAADgOCAYAAAB6pd%2buAXNSR0IArs4c6QZiS0dEAP8A%2fwD%2foL2nkwlwSFlzAAALEwAACxMBAJqcGAd0SU1FB9oGAhENK17O5ogZdEVYdENvbW1lbnQAQ3JlYXRlZCB3aXRoIEdJTVBXgQ4XAAAD6UlEQVRIx82WXWxTdRjGf6fndO3adbZ0VLoP9gFMXZQFNgSWDEkEYtSQkNVg4o2JH9NGJTMk6k01vTIhXshFzTCKE5NFORoXXDBs4nTMZHMzSETHDKyQyb7Xbu36dc7p8aaQZm5GNzd8rk7evOf%2fz%2fM%2bz%2f99X4E1htcn68v5742mffVRJd19uucqH539lSq3yKuHtlDmkPj99aPYe39kfRoMOqgCJHSdJNRL3AEE%2fB7h3xZFgO6JuRQdl6PE8zfRPzlF71CEojoXFc%2b9SPy3KxjCc%2bgCpIE0IilB65YWHFQBfAbUZEIDQGPA7xngDsNgMpFUY0Q0ESHHhKbkM3A9yoFqDceGQpTijWjhXxCAtC6gCWk0BAwLzqkAQsC6TJVDGcKrZdeDXp%2fcvki8zeuTH8uO6ehYzRJumxEUBUkyMa%2baUDWBVDLNnJJgNE9ixGZiOlckaQAVAWmBdTqBzqxQJ%2fD2KgrTCDzq9clywO%2fxZMi1AgcBBbhNPhyJ47TlsGuzjaHRSRRdoKq8AF3XOdvZw1BMQneUMl9iZN4eo3AmRWVwFulvqusAngBOryLBY0AcaPD65LeAFPAk0BLwe57OTnz3i4sc3ruFx2s24MwzoWgaW4tNnPn0JLt37KJ2zwGMgk5X3zd8ONJOX7mGvcK5OEGvT94HNGcs2rjSzrhUUwn4PV1AV4bcm5nwkYDfc3xhbs%2bVWQZH%2btlekc%2fDtRupKrub1uYT7NhWw9bde%2fl2REUSRR56pJT0lxofhM8xaheXVPA1oDPg9zT%2bExmsDqF8hUqmlvi%2bDUs6RWhW5Ov%2bKaxmK5XFLkIzIe7f%2fiBtwypPVZqIRWJ8Ny6x09OEJJs5rrTxn4yJY00NwRU0mtaMLY9kyL3n9clVAb%2fnley8wnyBkkIHrgILm925JGPTJONRDHqaHDQmx2a4Ph4hpFkpcZqZmBhHtbI4wYDfs3%2bNhn5bpqG03LKl1ydXAS97fXJ%2b9jv0Hq6lyK5C%2fBJ6PEjyj2nW2VQGLw5gLKqn92YSxWgjbrRy89ogVosFoyT%2bZUzcurjD65M71oDjCeDzbCIZ5VqAk9mJm9w5zAdPkRx%2bB3H6Y3Kj7TxQMkzLqfe5V71GvttFiduOa3aQc58E6JseJJXSEVhjeH2yvpxN5qVnygj%2fdJQCWxjBAOm0gVRC5MLPdoZnt2F3rsdisTAV7MBlusT3oVK6TOriCv4fIZnsSDlu1IQRNWVGV83kYKFuZzX7PQ1MFOg0j53nh%2bg8qpLg2eogeyJ53JFddDkLtyiZ6%2b%2b674Vu5cZXiIkJdAEMjnvIqzjEjVCS7rmrhOwC0Vwn58fqkIIXeL72Mn8CJn6UfKGeNt4ASUVORK5CYII%3d) HTTP/1.1 404 1801 I wonder what is causing this? A client is requesting these URLs. Seem to be some kind of badly configured google feature on the client side, or? Yes, probably. -- J. - The official User-To-User support forum of the Apache HTTP Server Project. See URL:http://httpd.apache.org/userslist.html for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
