Hello,
I'm having trouble with apache logging the wrong client IP address in the access logs. It used to log correctly and then one day it just starting logging rubbish. It used to log IP address in IPv4 now it logs them in IPv6 and its not even the right IP address and I don't have an IPv6 public IP address either only IPv4.
I have tried everything I can to fix the problem. I've uninstalled the rpms and before reinstalling I made sure there were no files left behind by running:
file `rpm -qpil httpd-2.0.52-41.ent.centos4.i386.rpm` | grep -v cannot
for all the rpms I was about to install.
I've even tried upgrading to a later version but this hasn't fixed the problem.
In my /etc/httpd/conf/httpd.conf file I have this set:
HostnameLookups Off
LogFormat "%h %a" ipaddresses
CustomLog logs/access.log.ipaddresses ipaddresses
When I try to access my webserver from a remote machine on the Internet as well as from a client machine on the LAN all I see in the log files is this:
[root@wilber httpd]# cat access.log.ipaddresses
a0d8:d2b7:48cc:9ba:b4cc:9ba:98af:d0bf | a0d8:d2b7:48cc:9ba:b4cc:9ba:98af:d0bf
a0d8:d2b7:48cc:9ba:b4cc:9ba:98af:d0bf | a0d8:d2b7:48cc:9ba:b4cc:9ba:98af:d0bf
a0d8:d2b7:48cc:9ba:b4cc:9ba:98af:d0bf | a0d8:d2b7:48cc:9ba:b4cc:9ba:98af:d0bf
a0d8:d2b7:48cc:9ba:b4cc:9ba:98af:d0bf | a0d8:d2b7:48cc:9ba:b4cc:9ba:98af:d0bf
If I edit /etc/httpd/conf/httpd.conf and change:
Listen 80
to:
Listen 0.0.0.0:80
and then restart httpd, my log files look like this instead:
[root@wilber httpd]# cat access.log.ipaddresses
98.64.210.183 | 98.64.210.183
98.64.210.183 | 98.64.210.183
98.64.210.183 | 98.64.210.183
98.64.210.183 | 98.64.210.183
I have the following version of apache:
[root@wilber ~]# rpm --query httpd httpd-devel httpd-manual httpd-suexec
httpd-2.0.52-41.ent.centos4
httpd-devel-2.0.52-41.ent.centos4
httpd-manual-2.0.52-41.ent.centos4
httpd-suexec-2.0.52-41.ent.centos4
System details:
[root@wilber ~]# cat /etc/release
ClarkConnect Community Edition release 4.2
[root@wilber ~]# cat /etc/redhat-release
CentOS release 4.2 (Final)
[root@wilber ~]# uname -a
Linux wilber.pointclark.net 2.6.18-92.cc4custom #1 SMP PREEMPT Sat Mar 21 22:33:49 EST 2009 i686 i686 i386 GNU/Linux
[root@wilber ~]# cat /proc/cpuinfo
processor : 0
vendor_id : GenuineIntel
cpu family : 15
model : 2
model name : Intel(R) Pentium(R) 4 CPU 2.00GHz
stepping : 4
cpu MHz : 2000.310
cache size : 512 KB
fdiv_bug : no
hlt_bug :
no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 2
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm up
bogomips : 4002.36
[root@wilber ~]# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/hda2 69G 64G 1.4G 98% /
/dev/hda1 130M 22M 102M 18% /boot
none 252M 0 252M 0% /dev/shm
/dev/hda3 3.0G 37M 2.8G 2% /var/log/snort
[root@wilber ~]# free
total used free shared buffers
; cached
Mem: 515720 493336 22384 0 35528 234448
-/+ buffers/cache: 223360 292360
Swap: 2104472 0 2104472
[root@wilber ~]#
Any help on how to fix this problem would be greatly appreciated.
TIA.
P.S. Sorry for the double post. The web based mailer I'm using chopped the first one.
|