Error log messages

Discussion in 'General' started by IanD, Jul 15, 2011.

  1. IanD

    IanD Well-Known Member


    I've been curious about for a while and I'm sure it's something very simple.

    I get a lot of the following lines in my error log:

    2011-07-15 15:01:53.700 [NOTICE] [***.***.***.***] Content len: 11, Request line: 'POST /l.php HTTP/1.1'

    The l.php is not relevant because it happens for all sorts of my scripts.

    I do a search on the IP address in the log file and this is the only line that mentions it. I've also search in /var/log/messages and /var/log/lfd.log and brings up nothing.

    I thought maybe they were requests from an IP that LiteSpeed has temporarily banned but that’s not the case.

    So I'm wondering, what are these notices? Are they failed requests? What does the user see?

    Many thanks,

  2. webizen

    webizen Well-Known Member

    which lsws version in question? also check few entries before and after to see anything correlated.
  3. IanD

    IanD Well-Known Member

    This is with version: 4.1.2 but it's happened with every version since I can remember.

    There is nothing either side of the line except other similar lines with different IP addresses.

    Would it be scripts that have timed out or something?
  4. webizen

    webizen Well-Known Member

    if it is timeout or error, you should see that in error.log

    what about access log? anything for that IP?
  5. IanD

    IanD Well-Known Member

    This is my error.log that I'm referring to.

    In my access log there about 160 lines for the IP address.

    I get the impression it has triggered something, but I don't know what or how to find out what.

    I see lines like:

    So this is obviously a 503 error but the log lines I'm referring to do not have any explanation before them. Just the:

  6. mistwang

    mistwang LiteSpeed Staff

    It is the dump of request info when something happened. That message itself does no harm, the root cause of that message may need some attention.
  7. IanD

    IanD Well-Known Member

    I see. But what happened? :) That's what I'm wondering and need to find out!

    It's not 503 because they are listed on a seperate line.

    I presume that when this info is dumped, the actual request isn't processed?
  8. IanD

    IanD Well-Known Member

    Ah found the problem..

    I enabled INFO level on my log file and the actual error is reported as INFO.

    I've got a couple of settings for 30 seconds,

    Initial Request Timeout (secs) Under External App


    Connection Timeout (secs) under Tuning

    Which one would it be? Does that mean this process is taking longer than 30 seconds to complete and therefore being marked as 'bad'?

    Many thanks,

  9. webizen

    webizen Well-Known Member

    should be "Initial Request Timeout (secs) Under External App".

    yes, it is because the processing time is longer than 30 seconds.

Share This Page