Overloading a line?

General discussions about Advanced Log Analyzer
Post Reply
dsfrank
Posts: 2
Joined: Sun Dec 18, 2005 3:48 pm

Overloading a line?

Post by dsfrank »

Hi Roman,

Some guestbook spam tries to put lots of URL addresses into play making for really, really long line entries like this-

85.19.187.21 - - [12/Mar/2007:21:26:53 -0800] "POST /aoguestbook/comment.php HTTP/1.1" 403 -
"http://cn84009.chinaw3.com/info/sign.asp?id=29&title=\xe5\xa4\x96\xe4\xbc\x81Unix/Linux\xe5\xb7\xa5\xe7\xa8\x8b\xe5\xb8\x88\xe5\x9f\xb
9\xe8\xae\xad, http://www.answermysearches.com/flickr- ... a-photo/8/,
http://..com/adver ... ation.html,
http://www.ashio.to/m-yone/bbs/mybbs.cg ... z8C&page=1,
http://www.aosoc.org/aoguestbook/comment.php?gb_id=277" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; MyIE2; Maxthon)"
203.113.15.234 - - [12/Mar/2007:21:27:06 -0800] "POST /aoguestbook/comment.php HTTP/1.1" 200 1942
"http://gorimon.com/blog/log/eid592.html, http://www.etly.com/guestbook/post.asp? ... 2006-12-21,
http://www.stapravda.ru/guestbook/comme ... gb_id=7018, http://tango-india.hautetfort.com/archi ... uette.html,
http://flexistentialist.org/blog/archiv ... -complete/,
http://www.knowledgerush.com/kr/jsp/db/ ... ures+Books,
http://adriandco.free.fr/sitedotclear/i ... ommentaire,
http://blogbanana.blog47.fc2.com/blog-entry-129.html, http://ecolonews.info/forum.php3?id_bre ... _forum=251,
http://sakinki.jugem.jp/?eid=188, http://www.aosoc.org/aoguestbook/comment.php?gb_id=126" "Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.0; MyIE2; Maxthon)"

Can this cause ALA to freeze?

thanks,

Diane

Post Reply