Re: log questions

Date view Thread view Subject view Author view

From: Debra Bartling (bartling@peer.berkeley.edu)
Date: Thu Jul 19 2001 - 12:49:09 PDT


At 11:51 AM 7/19/01 -0700, Jerome M Berkman wrote:
>I noticed a lot of "PROPFIND" lines in our web log, e.g.:
>
>[remote host] - - [17/Jul/2001:09:40:44 -0700] "PROPFIND / HTTP/1.1" 501 170
>[remote host] - - [17/Jul/2001:10:28:24 -0700] "PROPFIND
>/instmsg/aliases/xxx HTTP/1.0" 501 172

PROFIND is a WebDAV method that retrieves properties. See RFC 2518. There
is also an IIS 5.0 PROPFIND DoS, so if you are running it, be aware of that.

Debra Bartling
Programmer/Analyst
National Information Service for Earthquake Engineering
University of California, Berkeley
Phone: 510-231-9558
http://nisee.berkeley.edu/

-----------------------------------------------------------------------
The following was automatically added to this message by the list server:

Webnet information is available at <URL:http://wss.berkeley.edu/webnet/>.


Date view Thread view Subject view Author view

This archive was generated by hypermail 2b29 : Thu Jul 19 2001 - 12:46:27 PDT