On Sun, Apr 3, 2016 at 4:19 PM, Stephan Bosch <step...@rename-it.nl> wrote:
>> Unfortunately I do not know (yet) which client action produces these
>> log lines. "GET null null" seems not to be a sensible request in any
>> case.
>>
>> Anyone seeing the same effect?
>
>
> Did this happen only after upgrade to 2.2.23 or is this a fresh install?
>

This effect has been observed with 2.2.18 (initial install) and after
upgrading to 2.2.23 as well.


> Can you make a dump of what messages are exchanged on 10.0.0.123:8080 using
> ngrep or wireshark?
>

I've captured some requests and they look like this (some parts
changed due to privacy concerns):

GET 
/solr/select?fl=uid,score&rows=439&sort=uid+asc&q={!lucene+q.op%3dAND}hdr:%3c56fxxxx3a6.7080...@domain.de%3e+OR+hdr:%3c664dcdxxxxx1a4facd8b7922c495...@czchows1356.prg%5c-domain.com%3e+OR+hdr:%3c00cxxxxxde3$70ad7880$52
 ... (many many more OR hdrs)
&fq=%2Bbox:f696f93xxxxxx6e+%2Buser:u...@domain.de HTTP/1.1

The total request size is 31708 bytes and it contains many (hundreds?)
of 'OR hdrs' (side note: I wonder which client action triggers these
kind of requests, maybe the user selected hundreds of mails for
search?)

I _think_ this is a problem of the URL length / max http header size.
(Debian Jessie) Tomcat7 very likely does not accept more than 32kb
data in a request.

I wonder if Dovecot should limit SOLR requests to a specific size and
deny long requests with an imap error (?)

Chris

Reply via email to