On 01/08/2019 19:08, John Dale wrote: > I'm getting this in my logs - is this an attack do you think?
Unlikely to be an attack. Most likely a broken client. > How > might I determine this? debug logging for org.apache.coyote.http11.Http11InputBuffer is going to log the request line and HTTP headers for every request. tcpdump / wireshark is another option. > Could this be pushing bytes to the handler and causing a memory issue? No. Mark > > Error parsing HTTP request header > Aug 1 17:37:58 dom1 tomcat9[9793]: Note: further occurrences of HTTP > request parsing errors will be logged at DEBUG level. > Aug 1 17:37:58 dom1 tomcat9[9793]: > java.lang.IllegalArgumentException: Invalid character found in the > HTTP protocol > Aug 1 17:37:58 dom1 tomcat9[9793]: at > org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:531) > Aug 1 17:37:58 dom1 tomcat9[9793]: at > org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:294) > Aug 1 17:37:58 dom1 tomcat9[9793]: at > org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66) > Aug 1 17:37:58 dom1 tomcat9[9793]: at > org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:834) > Aug 1 17:37:58 dom1 tomcat9[9793]: at > org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1415) > Aug 1 17:37:58 dom1 tomcat9[9793]: at > org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) > Aug 1 17:37:58 dom1 tomcat9[9793]: at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) > Aug 1 17:37:58 dom1 tomcat9[9793]: at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) > Aug 1 17:37:58 dom1 tomcat9[9793]: at > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) > Aug 1 17:37:58 dom1 tomcat9[9793]: at > java.lang.Thread.run(Thread.java:748) > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
