Re: problem with extra numbers after %h hostname/ip address in access_log

[Jeroen Geilman <jeroen@xxxxxxxxx>]

On 1/28/11 5:25 PM, Randy Tejas wrote:

Hello,

I'm seeing a problem in my logs where there are extra numbers at the end of an ip address:

10.56.194.252194.252
10.56.195.63.195.63

Apache seems to be duplicating the last two octects. Anybody seen this before and how to fix?

Server version: Apache/2.0.63
Server built:ÂÂ Oct 24 2010 13:42:01

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

This is where it began (Jan 10):
10.79.24.178 - - [09/Dec/2010:20:40:20 -0600] "GET /everest/ HTTP/1.1" 200 98011
10.56.194.252194.252 - - [10/Jan/2011:16:57:37 -0600] "GET /images/search/ac_collectio
n_12x15.png HTTP/1.1" 404 316
10.56.194.252194.252 - - [10/Jan/2011:16:57:37 -0600] "GET /images/search/ac_pub_15x15
.png HTTP/1.1" 404 309

Thanks!

If you look at the above log, it only happens on 404s.
Are you redirecting ErrorDocuments somewhere ?

-- 
J.