apache logs

[PhEaSaNt PLuCKeR]

Hi

Can anyone advise me what is going on here please?

64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "CONNECT 64.12.165.56:6666
HTTP/1.0" 405 315
64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "POST
http://64.12.165.56:6666/ HTTP/1.0" 200 2335

I notice this in my logs now and then, is it easy to simulate this with
perl?

Thanks in anticipation
James

 

[A. Sinan Unur]

[ follow-ups set ]

Can anyone advise me what is going on here please?

64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "CONNECT
64.12.165.56:6666 HTTP/1.0" 405 315
64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "POST
http://64.12.165.56:6666/ HTTP/1.0" 200 2335

This part is off-topic here, but I think it is an attempt to exploit
some kind of porxy functionality. You are better off asking this part of
the question on an Apache group.

IMHO, it is good that the CONNECT request is denied.

I notice this in my logs now and then, is it easy to simulate this
with perl?

If by "simulate" you mean whether you can craft such requests with Perl,
I would suggest looking into LWP:

http://search.cpan.org/~gaas/libwww-perl-5.803/lib/LWP.pm

Sinan

 

[Matt Garrish]

Hi

Can anyone advise me what is going on here please?

64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "CONNECT 64.12.165.56:6666
HTTP/1.0" 405 315
64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "POST
http://64.12.165.56:6666/ HTTP/1.0" 200 2335

I notice this in my logs now and then, is it easy to simulate this with
perl?

See the LWP module and lwpcook for examples of how to post data to a server
using perl.

Matt

 

[PhEaSaNt PLuCKeR]

Hi

Can anyone advise me what is going on here please?

64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "CONNECT 64.12.165.56:6666
HTTP/1.0" 405 315
64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "POST
http://64.12.165.56:6666/ HTTP/1.0" 200 2335

I notice this in my logs now and then, is it easy to simulate this with
perl?

See the LWP module and lwpcook for examples of how to post data to a
server using perl.

Matt

======================================================
Ok Matt, I'll have a look tks.

James

 

[PhEaSaNt PLuCKeR]

[ follow-ups set ]

Can anyone advise me what is going on here please?

64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "CONNECT
64.12.165.56:6666 HTTP/1.0" 405 315
64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "POST
http://64.12.165.56:6666/ HTTP/1.0" 200 2335

This part is off-topic here, but I think it is an attempt to exploit
some kind of porxy functionality. You are better off asking this part of
the question on an Apache group.

IMHO, it is good that the CONNECT request is denied.

I notice this in my logs now and then, is it easy to simulate this
with perl?

If by "simulate" you mean whether you can craft such requests with Perl,
I would suggest looking into LWP:

http://search.cpan.org/~gaas/libwww-perl-5.803/lib/LWP.pm

Sinan


=========================================================

This part is off-topic here, but I think it is an attempt to exploit

check the header m8

If by "simulate" you mean whether you can craft such requests with Perl,
I would suggest looking into LWP:

Yes I'll have a look Sinan Thanks

James

 

[A. Sinan Unur]

[ follow-ups set ]

Can anyone advise me what is going on here please?

64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "CONNECT
64.12.165.56:6666 HTTP/1.0" 405 315
64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "POST
http://64.12.165.56:6666/ HTTP/1.0" 200 2335

This part is off-topic here,

....

check the header m8

Why? To see that you have cross-posted to unrelated groups?

You should identify the Perl question, and the Apache question, and post
separately.

While you are at it, you might want to read the posting guidelines for
comp.lang.perl.misc. It has several recommendation on posting and
follow-up styles.

Sinan

 

[PhEaSaNt PLuCKeR]

[ follow-ups set ]


Can anyone advise me what is going on here please?

64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "CONNECT
64.12.165.56:6666 HTTP/1.0" 405 315
64.12.165.33 - - [22/Oct/2005:09:34:57 +0100] "POST
http://64.12.165.56:6666/ HTTP/1.0" 200 2335

This part is off-topic here,

...

check the header m8

Why? To see that you have cross-posted to unrelated groups?

You should identify the Perl question, and the Apache question, and post
separately.

While you are at it, you might want to read the posting guidelines for
comp.lang.perl.misc. It has several recommendation on posting and
follow-up styles.

Sinan