Jump to content

Apache not logging all accesses to the server

Recommended Posts



We recently moved our site to a new hosting company. Since moving, our traffic stats are about 10% of what they were previously. I've been trying to figure this out for while, but I'm at a loss. I'm hoping some Apache guru can spot the issue.

I ran this command to see who was accessing the server.

# netstat -tn 2>/dev/null | grep :443 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr | head

Then I greped the logs for the IPs.

grep "" /var/log/httpd/stovebolt/*
# grep "" /var/log/httpd/stovebolt/* | wc -l

grep -l  "" /var/log/httpd/stovebolt/* 

So, one IP isn't in any logs, even though it has the most connections. The next IP is in the logs, but only in the ssl_request.log, not the access.log. That makes no sense to me at all. I've engaged the support staff at the hosting company but so far they've come up with nothing.

My IP doesn't show up in the logs, and I'm on the site every day doing moderation work, accepting new registrations on the forum, approving posts of new members, etc.

grep -l "" /var/log/httpd/stovebolt/*
grep "" /var/log/httpd/stovebolt/ssl_access_log - - [05/Jul/2022:15:19:07 -0400] "-" 408 - - - [05/Jul/2022:15:19:08 -0400] "-" 408 - - - [05/Jul/2022:15:20:20 -0400] "-" 408 - - - [05/Jul/2022:15:20:20 -0400] "-" 408 -

This is my log info.

The server is on EDT, which is where the owners are located. (The server itself is located in CDT.)

Tue Jul  5 15:39:11 EDT 2022
ls /var/log/httpd/stovebolt/
access.log           access.log-20220626  error.log           error.log-20220626  ssl_access_log   ssl_request.log           ssl_request.log-20220626
access.log-20220619  access.log-20220703  error.log-20220619  error.log-20220703  ssl_request_log  ssl_request.log-20220619  ssl_request.log-20220703
# grep -A1 ".log" /etc/httpd/conf.d/stovebolt.conf
	TransferLog  /var/log/httpd/stovebolt/access.log
	ErrorLog /var/log/httpd/stovebolt/error.log
#        LogLevel alert rewrite:trace3
        CustomLog "/var/log/httpd/stovebolt/ssl_request.log" \
                  "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
Edited by stoveboltgeek
adding more info
Link to comment
Share on other sites

This thread is more than a year old. Please don't revive it unless you have something important to add.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.