taffic attack,huge size in web log

vincentltl · 04-03-2006, 04:39 AM

I found that there are many lines in my web log, my server is fedora linux.
The lines are "221.8.186.158 - - [03/Apr/2006:16:35:26 +0800] "GET log.cpc.sohu.com:90/?pv.png HTTP/1.0" 200 857 "adsence.sogou.com/index.html?pid=mywebcode&ww=200&dc=3&dir=0&num=6&color=1&charset=gb" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
61.243.176.38 - - [03/Apr/2006:16:36:11 +0800] "CONNECT tcpconn4.tencent.com:443 HTTP/1.1" 400 310 "-" "-""
These lines continue existing in my log, resulting in a huge size within an hour.
Would you suggest me some ways to solve it. Thank you so much.

cyber-worx · 04-03-2006, 04:54 AM

So Many Choices...
A) install snort so that malicious traffic is dropped
B) install an apache module so that malicious traffic is dropped
C) install a decent log monitor / rotater

Regards
-Rob

XavierP · 04-03-2006, 06:25 AM

Please do not post the same thread in more than one forum. Picking the most relevant forum and posting it once there makes it easier for other members to help you and keeps the discussion all in one place.

http://www.linuxquestions.org/rules.php