- Code: Select all
[Sun Aug 10 02:19:17 2008] [error] [client 85.114.141.152] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
wie bring ich meinen Apache dazu solche Einträge in eine andere Logfile zu schreiben? Also alles was ISC.SANS oder w00tw00t enthält.
Oder alle Reguest Without Hostname...
Möcht mir ne Firewallrule basteln und da hätt ich die Einträge gern seperiert, da sich ne kleine Log schneller bearbeiten lässt ^^
Jemand ne Idee?
Auf http://www.webmasterworld.com/apache/3481679.htm hab ich folgendes gefunden:
Respectfully: I manage to keep all the CodeRed garbage and much besides out of my logs for specific domains by using the following in httpd.conf:
SetEnvIfNoCase Request_URI "^/string to exclude/" drop
and then
CustomLog /var/log/httpd/www.mydomainname.com-access_log combined env=!drop
between <VirtualHost> and </VirtualHost>
but replacing "string to exclude" with w00tw00t.at.ISC.SANS.DFind:) throws up an error message because Apache gets confused with the ) at the end. I've tried commenting it out, ie "\)" but this doesn't work either. What I need is the correct syntax, if such syntax is at all possible. Help! It's driving me crazy.
kann mir jemand erklären was der meint?