Hi everyone, I need your help. As you may recall, there have been some issues this month with bandwidth use.
The logs showed that on one day (18th April) a single IP address downloaded over 1 terabyte of data. After a long tussle with the support team at the ISP, they agreed that it wasn't possible that someone downloaded a terabyte in 24 hours and they chopped out the offending entries from the access log for that day, which effectively reset bitshrine.orgs bandwidth counters. Anyhow, this is merely treating the symptom, not the cause. What I think is happening is that someone has a misbehaving script that attempts to download a file, immediately gives up and then retries the same download in a loop forever. What I would like to to do is to think if any of you have: * Written a script that could misbehave * Have a "new" version of ltib that shows this kind of odd behaviour (I doubt this as the client looks like a Windows NT .NET client). * Have a theory to explain this. To help you get your head around this, a section of one of the logs is attached. TIA, Stuart
58.251.88.74 - - [01/Apr/2011:02:59:29 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://bitshrine.org/gpp"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:30 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:36 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.0" 200 112066923 "http://bitshrine.org/gpp"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:38 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:39 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:40 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:41 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:42 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:43 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:44 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:46 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:02:59:47 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 58.251.88.74 - - [01/Apr/2011:03:00:08 -0400] "GET /gpp/qtopia-opensource-src-4.3.0.tar.gz HTTP/1.1" 200 112066923 "http://www.bitshrine.org/gpp/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
_______________________________________________ LTIB home page: http://ltib.org Ltib mailing list [email protected] https://lists.nongnu.org/mailman/listinfo/ltib
