Mailing List Archive: bad records in access

Hi!

I found the following bad records in the error.txt file:

F: Opening /var/log/apache2/access_log as logfile
C: 66.249.71.69 - - [11/Mar/2009:19:00:57 +0200] "GET /robots.txt HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [11/Mar/2009:19:00:57 +0200] "GET /K_comm/english/Roots_tree/Pictures/arthur0311Pic.htm HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [11/Mar/2009:19:55:14 +0200] "GET /K_comm/english/Roots_tree/Pictures/Lucille511Pic.htm HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [12/Mar/2009:05:45:25 +0200] "GET /robots.txt HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [12/Mar/2009:05:45:25 +0200] "GET /k_comm/Israel/English/Maps/JNF-KKL/Sataf/obj/pages/P7270264_jpg.htm HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [12/Mar/2009:06:36:23 +0200] "GET /k_comm/Israel/English/Maps/JNF-KKL/Sataf/obj/pages/P7270221_jpg.htm HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [12/Mar/2009:06:44:35 +0200] "GET /k_comm/Israel/English/Maps/Rezervations/EinGedi/Synagouge.htm HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [12/Mar/2009:07:00:58 +0200] "GET /K_comm/english/Roots_tree/Pictures/rt0211a.htm HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [12/Mar/2009:07:17:21 +0200] "GET /MIS/Hebrew/gate/Glossary/definitions/diagrams/diagrams_general/diagrams_general_03.htm HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [12/Mar/2009:07:25:33 +0200] "GET /MIS/Hebrew/gate/Glossary/definitions/diagrams/diagrams_type/diagrams_mapping/diagrams_mapping_01.htm HTTP/1.1" 403 590
C: *
C: 66.249.71.69 - - [12/Mar/2009:07:33:44 +0200] "GET /MIS/Hebrew/gate/Glossary/definitions/diagrams/diagrams_flow/diagrams_flow_06/description_chart_ex06.htm HTTP/1.1" 403 590
C: *
F: Closing logfile /var/log/apache2/access_log

I see that all of them are from same IP.
In the analog.cfg file I have 2 LOGFORMAT lines:

LOGFORMAT (::%j)
LOGFORMAT combined

What can be the problem with the above records?
How to solve it?

TIA

Nanu

+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Nanu Kalmanovitz wrote:
> I found the following bad records in the error.txt file:
>
> C: 66.249.71.69 - - [11/Mar/2009:19:00:57 +0200] "GET /robots.txt HTTP/1.1" 403 590
> C: *
>
> In the analog.cfg file I have 2 LOGFORMAT lines:
>
> LOGFORMAT (::%j)
> LOGFORMAT combined
>
> What can be the problem with the above records?
> How to solve it?
>
LOGFORMAT combined expects referrer and browser information fields also
(see http://www.analog.cx/docs/logfile.html#formats for details).

Two options:
1. Configure your Apache server to always include these two fields, even
when they are empty ("" "" for requests with no browser or referrer
information)
2. Configure analog to accept common and combined log formats as per
http://www.analog.cx/docs/logfmt.html

LOGFORMAT (::%j)
LOGFORMAT COMBINED
LOGFORMAT COMMON

--
Klaus Johannes Rusch
KlausRusch@atmedia.net
http://www.atmedia.net/KlausRusch/

+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------