Web Servers on Unix and Linux - internal dummy connection

This is Interesting: Free IT Magazines  
Home > Archive > Web Servers on Unix and Linux > January 2006 > internal dummy connection





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author internal dummy connection
A. A.

2006-01-08, 7:48 am

Hello All,

I'm getting tons of the following strange line in my access_log:

::1 - - [08/Jan/2006:08:38:30 -0500] "GET / HTTP/1.0" 200 482 "-" "Apache/2.2.0 (Unix) mod_ssl/2.2.0 OpenSSL/0.9.7f
PHP/5.1.1 (internal dummy connection)"

Any clue what it means and how to fix it?

Thanks.


Juha Laiho

2006-01-08, 5:56 pm

"A. A." <dont@spam.com> said:
>I'm getting tons of the following strange line in my access_log:
>
>::1 - - [08/Jan/2006:08:38:30 -0500] "GET / HTTP/1.0" 200 482 "-"
>"Apache/2.2.0 (Unix) mod_ssl/2.2.0 OpenSSL/0.9.7f
>PHP/5.1.1 (internal dummy connection)"
>
>Any clue what it means and how to fix it?


.... hmm.
::1 -- access came from localhost, using IPv6 as the transmission channel
GET / -- Root URL of your site was accessed
"Apache/2.2.0..." -- apparently the access came _from_ your web server

You might wish to look at other things that were called roughly at the
same time with this access. Apparently some server-side action at your
site is triggering the site to access itself.
--
Wolf a.k.a. Juha Laiho Espoo, Finland
(GC 3.0) GIT d- s+: a C++ ULSH++++$ P++@ L+++ E- W+$@ N++ !K w !O !M V
PS(+) PE Y+ PGP(+) t- 5 !X R !tv b+ !DI D G e+ h---- r+++ y++++
"...cancel my subscription to the resurrection!" (Jim Morrison)
A. A.

2006-01-09, 2:54 am


"Juha Laiho" <Juha.Laiho@iki.fi> wrote in message news:dprojl$93j$1@ichaos2.ichaos-int...
> "A. A." <dont@spam.com> said:
>
> ... hmm.
> ::1 -- access came from localhost, using IPv6 as the transmission channel
> GET / -- Root URL of your site was accessed
> "Apache/2.2.0..." -- apparently the access came _from_ your web server
>
> You might wish to look at other things that were called roughly at the
> same time with this access. Apparently some server-side action at your
> site is triggering the site to access itself.


Juha,

Thank you for your followup. I've looked at my full web logs
1 minute before and 1 minute after each of these dummy entries,
second by second, but I couldn't find a related entry that can
produce this dummy line. Is there a more robust way to trace it?
I'm starting to get concerned that the server is doing something
that it shouldn't.


-aa


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com