[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[debian-users:40998] Re: apacheのworm-log
- From: YOSHIFUJI Hideaki / 吉藤英明 <yoshfuji@xxxxxxxxxxxxxx>
- Subject: [debian-users:40998] Re: apacheのworm-log
- Date: Mon, 12 Jul 2004 17:17:44 +0900
- List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
- List-id: debian-users.debian.or.jp
- List-owner: <mailto:debian-users-admin@debian.or.jp>
- List-post: <mailto:debian-users@debian.or.jp>
- List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
- List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
- Organization: USAGI Project
- X-face: "5$Al-.M>NJ%a'@hhZdQm:."qn~PA^gq4o*>iCFToq*bAi#4FRtx}enhuQKz7fNqQz\BYU] $~O_5m-9'}MIs`XGwIEscw;e5b>n"B_?j/AkL~i/MEa<!5P`&C$@oP>ZBLP
- X-fingerprint: 9022 65EB 1ECF 3AD1 0BDF 80D8 4807 F894 E062 0EEA
- X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
- X-ml-name: debian-users
- X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
- X-original-to: debian-users@debian.or.jp
- X-pgp-key-url: http://www.yoshifuji.org/%7Ehideaki/hideaki@xxxxxxxxxxxxxxxxx
- X-spam-level:
- X-spam-status: No, hits=-1.2 required=10.0 tests=IN_REP_TO,ISO2022JP_BODY,ISO2022JP_CHARSET, MAILTO_TO_SPAM_ADDR,NOSPAM_INC,QUOTED_EMAIL_TEXT, RCVD_IN_ORBS,REFERENCES,SPAM_PHRASE_00_01 version=2.44
- X-url: http://www.yoshifuji.org/%7Ehideaki/
- References: <200407080148.i681mbwo021349@xxxxxxxxxxxxxxxxx> <200407091012.i69AC1Zb001025@xxxxxxxxxxxxxxxxx> <20040712165502.91DC.AKISATO1977@xxxxxxxxxxx>
- Message-id: <20040712.171746.16836598.yoshfuji@xxxxxxxxxxxxxx>
- X-mail-count: 40998
- X-mailer: Mew version 2.2 on Emacs 20.7 / Mule 4.1 (AOI)
In article <20040712165502.91DC.AKISATO1977@xxxxxxxxxxx> (at Mon, 12 Jul 2004 17:09:44 +0900), 秋里 <akisato1977@xxxxxxxxxxx> says:
> /etc/apache/conf/httpd.conf
> SetEnvIf Request_URI "default\.ida" worm-log
:
> SetEnvIf Request_URI "SEARCH /\x90\x02\xb1" worm-log
>
> CustomLog /var/log/apache/access.log combined env=!worm-log
> CustomLog /var/log/apache/httpd-worm.log combined env=worm-log
>
> この状態ですと、なぜか"default.ida"で始まるログはwormのほうへはけてくれ
> るのですが、"SEARCH /\x90\x02\xb1" はaccess.logへ記録されるままです。。
> 正規表現なのでバックスラッシュもエスケープするのかな？と思い「\\x90\\x02」
> など試しましたが状況かわらずです。
> apacheのreload、restart等も試しています。
SEARCH は Request_URI ではないのでは？
--yoshfuji