Logs (Big and Heavy, But Not Wood)

Today’s Tip:

One of the Windows worms currently running amok is annoying in that it uses a buffer overrun exploit via a very long URL. Not a problem for a Linux system, but this makes the web server logs balloon in size and makes them a pain to browse manually.

Fortunately, it can be mitigated a bit. Changing the “%r” in any LogFormat lines in Apache’s httpd.conf to “%!414r” completely trims out any URLs which are considered too long.

Leave a Reply

Your email address will not be published. Required fields are marked *